{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"80.67.167.81"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.98.51.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"89.58.26.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.45.102.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.99"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"87.118.116.103"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"89.58.41.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.1"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"179.43.182.232"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"37.187.5.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"195.176.3.23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.7"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.43"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.95"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"190.120.229.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"87.118.122.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"195.176.3.24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"194.15.112.133"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.208.75.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"162.251.5.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.47"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"66.146.193.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"139.99.172.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"80.241.60.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"190.211.254.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.132.144.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.183.157.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"212.73.134.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"188.68.49.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"199.195.253.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"199.195.251.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.181.61.203"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"138.59.18.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.246.188.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"188.68.41.191"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"179.43.182.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.207.107.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.244.192.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"195.88.74.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.70.100.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"94.230.208.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"77.81.247.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"217.12.221.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"94.230.208.148"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"95.128.43.164"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"102.130.113.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.227.134.106"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"71.19.144.106"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.208.75.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.246.188.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"209.141.55.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.45.104.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.42.116.96"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.208.75.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"188.68.52.231"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"87.118.116.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.129.62.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.207.107.130"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"87.118.122.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"81.16.33.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"173.255.198.243"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"216.73.159.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"194.15.115.212"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"160.119.249.240"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.244.192.175"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.34.33.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"103.109.101.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"46.232.251.191"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.85.191.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.56.171.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.208.75.239"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.105.134.150"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.85.191.7"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.208.75.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"205.185.116.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.154.110.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.206.26.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"162.216.18.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.45.98.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.82.219.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.130.47.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"109.169.33.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.2.67.226"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"83.97.20.77"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.58.107.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"205.185.123.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"205.185.121.170"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.66.35.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.66.35.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.96.155.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.129.62.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"205.185.124.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.255.117.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"179.43.159.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"81.17.28.95"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"89.147.110.118"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"104.192.3.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.92.109.43"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.137.14.106"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.137.14.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.137.14.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.137.14.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.55"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.43"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.47"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.60"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.54"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.220.101.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.246.128.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.219.236.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"209.141.32.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"130.193.15.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.246.188.149"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.12.3.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"123.253.35.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.246.84.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"66.220.242.222"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.191.204.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"107.189.13.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"102.130.117.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.255.104.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"178.218.144.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"85.93.218.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"195.80.151.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"89.147.108.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"62.182.84.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.66.35.22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"199.195.253.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.8.156.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.112.146.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.42.170.203"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.92.109.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"172.234.228.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"94.142.241.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"94.142.244.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.106.102.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"93.99.104.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"212.69.167.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"165.73.242.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.243.218.226"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.104.86.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"114.35.245.150"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"107.189.29.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.243.218.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.243.218.230"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"103.164.54.199"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.128.133.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.208.75.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"209.141.51.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.243.218.225"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.76"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.182"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"212.38.189.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"87.118.116.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.100.85.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"88.80.26.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"88.80.26.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"192.76.153.253"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"200.122.181.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"35.0.127.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"89.147.111.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.255.118.218"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"188.239.191.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.36.132.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.165.171.84"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"80.94.92.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"91.203.144.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.255.125.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"108.61.189.136"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"139.99.8.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"172.104.182.84"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"136.244.111.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"93.99.104.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"190.103.179.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.200.229.243"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.66.35.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.235.146.29"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"88.80.26.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"146.59.231.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"178.218.144.96"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"93.99.104.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.98.57.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"93.95.231.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.98.62.158"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.222"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.55"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.172"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.47"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.98.57.151"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"205.185.113.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"209.141.45.141"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"83.217.9.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.150.28.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.181.60.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"37.221.208.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"93.95.227.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.254.196.141"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"172.104.186.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"107.189.3.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"103.146.203.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"166.70.207.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"198.46.166.157"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"172.105.20.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.54"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.95.169.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"84.19.182.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"89.147.110.82"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"178.17.171.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.197"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.199"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"193.189.100.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"92.246.84.133"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"178.20.55.182"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"178.20.55.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"205.185.113.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.84.107.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"194.15.113.118"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"199.195.248.168"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"103.20.241.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"37.228.129.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.133.74.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"62.72.47.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"46.250.243.29"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"185.67.82.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"171.25.193.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.91.250.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"154.53.58.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.148.10.111"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"204.194.29.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"5.104.84.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"107.189.8.70"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"45.9.168.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"74.82.47.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"194.163.136.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"179.43.128.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"94.72.104.135"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"77.48.28.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"tor-exit; provenance=feed","ip":"77.48.28.237"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","tor-exit"],"labels":{"score":79,"family":"tor_exit"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.220.146.226"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":92,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.224.138.250"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":92,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"103.250.147.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":92,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"92.118.39.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","attacker"],"labels":{"score":92,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"2.57.122.209"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","attacker"],"labels":{"score":92,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"77.90.185.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":92,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"205.237.110.232"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":92,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.217.23.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":90,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.245.140.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":90,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"103.228.150.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":90,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"146.190.164.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.182.16.23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"104.238.110.208"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.42.168"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"122.234.231.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.230.169.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.40.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.154.30.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"166.62.42.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"80.94.92.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"47.243.26.215"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"49.49.13.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"113.20.8.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"79.175.133.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"24.36.189.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"80.5.84.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"159.195.38.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"179.237.82.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"15.204.173.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"24.15.74.210"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"24.233.0.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"200.105.156.165"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"154.88.65.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"118.38.44.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"59.120.178.166"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.70.94.155"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"61.73.27.69"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"87.106.163.159"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"92.118.39.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"66.94.103.120"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"221.141.48.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"41.56.219.139"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.230.253.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.71.247.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"209.103.243.96"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.96.252.171"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.44.26.227"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.128.244.24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"123.165.81.60"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.12.142.129"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"201.177.17.158"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"151.54.175.253"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.105.198.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.97.239.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"159.223.29.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"23.254.242.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"107.172.218.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"160.251.173.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.148.129.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"124.123.72.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.248.10.233"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.60.61.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.46.214.123"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"157.245.37.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.155.131.250"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.134.23.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.242.3.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"77.68.32.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"2.57.121.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"67.205.143.171"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"61.105.6.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"116.123.150.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.162.127.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"15.235.183.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"141.94.47.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"20.198.118.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"173.249.59.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.129.69.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.133.65.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.151.182.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":90,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.233.156.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":89,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"103.112.97.83"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":89,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"178.158.214.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":89,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"175.203.168.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":89,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"130.12.209.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":89,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"57.129.134.159"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":88,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.194.18.69"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":88,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"115.95.83.169"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":88,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"103.180.134.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":87,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"81.10.39.215"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":87,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"72.53.216.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"87.232.98.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.53.199.246"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"118.220.222.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"51.91.159.141"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"124.56.22.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"219.117.200.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"61.85.36.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"27.79.7.170"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":85,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"169.58.49.65"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":84,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.134.68.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":84,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"121.186.191.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":84,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"111.68.4.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":84,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"121.161.122.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":84,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"77.90.185.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"107.173.214.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"79.175.93.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.46.255.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"123.141.253.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"121.139.15.185"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"23.95.2.82"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.31.117.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"182.70.249.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"149.202.51.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"60.104.53.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"87.107.112.99"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.225.210.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.59.206.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.53.253.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"192.3.170.224"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"178.105.41.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.130.10.148"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"116.110.211.213"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.154.43.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"92.118.39.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"104.237.145.228"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"167.71.192.149"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"221.1.111.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"125.178.83.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"65.49.20.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"13.228.7.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"18.223.29.55"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"54.147.8.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"98.93.214.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.167.77.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"89.43.28.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"78.47.83.135"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.79.165.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"64.207.185.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.153.34.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.40.171"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"177.53.87.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"119.176.53.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"103.126.118.226"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.42.172"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"162.255.112.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"177.53.66.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"183.146.107.210"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"118.161.208.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.61.47.118"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"138.84.41.23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"177.70.145.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.57.207.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"170.244.45.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.170.136.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"171.61.23.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"14.212.187.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.178.29.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"123.96.50.166"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.178.110.232"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"168.205.205.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"95.232.64.115"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.97.239.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"177.66.17.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"64.187.121.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"168.210.92.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"178.104.90.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"129.226.201.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"23.170.48.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.232.68.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"23.147.56.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"217.154.150.0"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.103.84.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"156.239.238.244"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.53.254.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"114.70.63.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.134.182.81"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"20.241.133.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"116.118.9.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"191.55.48.166"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"168.205.81.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.44.50.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"149.109.89.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.48.12.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"213.174.0.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"74.122.175.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"146.120.251.75"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.70.58.103"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"177.92.167.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"192.141.115.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.26.13.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"212.8.60.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"117.163.241.64"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"105.98.48.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"179.63.109.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"201.179.139.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"2.192.240.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.201.77.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"149.107.215.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"181.233.26.219"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"104.176.155.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.70.80.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"79.43.14.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"165.232.143.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"89.58.12.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"64.226.70.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.120.191.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"197.158.28.148"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.18.18.208"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.217.107.250"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"95.217.225.116"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.53.54.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"40.81.23.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.135.98.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"89.163.210.169"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"2.57.122.168"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"217.59.129.228"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"202.61.252.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"222.117.107.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"15.204.94.7"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"139.99.221.130"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"146.190.85.221"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"72.133.41.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"165.154.163.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.183.253.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.172.92.108"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"82.64.187.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"167.172.66.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"155.138.242.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"51.91.158.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"34.156.213.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"171.243.150.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"151.42.171.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":82,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"217.182.204.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":81,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"140.245.49.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":81,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.164.6.113"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":81,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"167.99.76.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"75.65.131.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"221.152.121.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"163.41.112.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"150.241.245.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.153.138.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"208.87.206.165"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"73.94.254.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"163.7.4.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"104.168.100.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"115.95.123.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.198.254.75"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.146.20.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"66.154.109.117"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"54.37.78.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"54.89.170.205"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.255.98.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.202.170.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"154.64.245.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"14.43.37.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"14.35.195.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"82.152.164.175"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"86.127.237.96"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"119.64.59.76"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.231.34.224"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"135.181.26.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"204.152.221.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"79.220.15.253"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"65.32.76.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.128.43.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"89.168.43.135"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.249.197.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"4.204.40.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"85.215.44.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"38.244.14.159"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"213.227.151.237"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.146.77.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"58.235.190.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"155.94.142.85"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.123.212.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":80,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"187.198.170.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":79,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"78.47.206.103"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":79,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"130.12.180.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":77,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"141.95.19.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":77,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"149.165.168.169"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":77,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"85.215.42.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":77,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.59.110.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":77,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.108.248.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":76,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"51.75.119.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":76,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"82.165.94.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"220.80.135.143"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"90.79.249.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"118.141.37.23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"160.30.78.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"150.5.136.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"130.162.56.155"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"82.165.218.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.225.78.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"73.94.70.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.144.179.246"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":75,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.128.214.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.154.43.210"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"65.49.1.212"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"207.154.245.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"167.235.135.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.143.61.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"58.231.69.120"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"217.154.150.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"72.167.38.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"27.4.75.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"115.215.8.205"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"115.212.133.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"183.151.56.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"125.126.9.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"58.48.134.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"122.231.135.121"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"36.25.33.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"201.239.183.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"115.206.117.208"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"122.241.244.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"125.113.78.166"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.148.225.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.191.92.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.172.218.158"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"170.82.66.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"110.36.11.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"196.115.195.233"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"60.175.67.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"191.55.53.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"213.32.22.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.16.17.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.130.35.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.216.97.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"220.82.236.135"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.16.17.141"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"77.90.42.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"121.134.185.166"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.53.52.136"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.178.110.228"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.16.17.136"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"107.148.229.185"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.16.17.138"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.82.86.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"162.55.51.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"78.47.87.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"110.139.126.185"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.160.198.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"105.224.39.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"213.5.192.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"123.139.55.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.104.37.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"93.177.151.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.44.123.123"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.200.8.170"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.55.136.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.116.203.224"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.64.239.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"191.5.152.243"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.201.82.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"1.30.190.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"200.125.93.246"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"192.162.210.212"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.102.192.245"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"39.46.131.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"200.123.52.160"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"89.167.114.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.132.228.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"220.86.129.106"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"24.181.69.247"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"189.1.188.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"79.210.152.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.119.224.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"189.91.14.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"202.92.128.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.181.182.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.163.104.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"62.3.42.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"15.204.118.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"156.47.118.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"129.159.225.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"178.105.235.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"67.215.227.54"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"179.104.48.170"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"43.167.234.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.136.31.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"138.84.158.108"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"66.154.115.247"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"52.159.119.130"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"188.27.255.116"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"159.69.107.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.45.101.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"119.192.243.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"34.156.162.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"110.38.211.212"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.40.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":74,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"119.199.160.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":73,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"151.252.94.135"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":73,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"111.32.90.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":73,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"187.158.16.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":73,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"149.71.44.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"125.178.243.115"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"220.82.85.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"116.110.223.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"109.86.1.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"211.208.149.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.2.222.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"175.137.68.65"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"139.162.89.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"75.119.136.224"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.116.73.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.32.11.205"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"107.175.122.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"164.68.126.145"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"198.98.53.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":72,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"139.19.117.129"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot"],"labels":{"score":71,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.16.17.140"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.60.239.199"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"69.138.209.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"142.154.84.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.76.28.231"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"138.84.156.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"47.236.165.237"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"2.26.18.111"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.92.216.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"125.178.189.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":68,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"74.82.47.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.42.81"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"128.14.232.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"50.35.63.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"59.55.24.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"125.114.201.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.178.110.218"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"102.97.58.108"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.148.10.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.154.244.83"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"138.117.14.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"122.116.145.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.97.239.29"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"93.170.116.43"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"201.188.232.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.227.245.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.31.120.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"200.123.53.231"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"189.142.100.143"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.30.243.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"189.163.144.255"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"95.46.142.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"64.226.122.0"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.106.108.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":67,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"102.132.190.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":66,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"141.98.198.116"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"89.58.10.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"85.221.202.129"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"144.91.111.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"80.241.219.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.149.66.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"75.119.143.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"59.28.19.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.98.170.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"165.227.229.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":65,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"142.93.58.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":63,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"212.8.242.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":63,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.39.73.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":61,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"57.131.131.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":61,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"54.37.226.197"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":61,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.164.94.244"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":61,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"23.94.108.103"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":59,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"38.83.138.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":59,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"81.169.241.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":59,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"87.76.209.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":59,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.163.162.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":59,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"186.122.10.221"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":47,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.99.7.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":47,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.216.74.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"210.113.107.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"138.201.249.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"23.254.212.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"161.97.148.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"180.57.180.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"161.97.94.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"85.215.237.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.199.130.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"85.95.188.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"92.5.66.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":2,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"105.225.100.190"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","brute_force"],"labels":{"score":42,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.20.125.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.96.45.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"74.12.184.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"73.89.93.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.93.229.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"189.203.96.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"45.159.89.69"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.102.219.224"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"95.47.115.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"14.187.16.203"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.211.163.155"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"144.31.118.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"98.48.1.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"79.122.2.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.191.145.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"200.229.144.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.155.212.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"168.90.127.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":42,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"93.171.214.249"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.92.47.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"187.45.54.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"88.183.227.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"183.152.229.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"58.62.126.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"213.177.179.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"103.172.186.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"179.127.96.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"195.178.110.227"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"68.183.69.247"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"80.94.92.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.32.162.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"93.171.169.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"178.150.124.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.237.243.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.43.51.246"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"82.59.40.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"212.90.63.60"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.39.227.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.203.101.99"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.145.183.182"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"177.38.22.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"187.67.57.125"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.204.135.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.194.7.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"105.186.221.249"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.0.87.133"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.221.196.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"20.3.129.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"65.49.20.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"139.99.69.227"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"192.186.11.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.132.64.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"159.195.60.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"94.16.17.139"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"196.119.152.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.105.161.7"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.107.171.233"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"128.127.117.240"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"212.164.39.164"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.207.128.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"27.130.237.60"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.110.31.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.211.80.208"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"178.187.69.106"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"179.190.122.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.193.131.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"136.169.215.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"91.205.199.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"116.87.148.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"2.61.167.149"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.172.84.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"193.34.173.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"185.82.178.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"223.190.83.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"88.175.246.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"128.140.76.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"31.43.49.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"105.157.155.75"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"194.4.70.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"70.93.3.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"190.162.14.68"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":35,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"77.239.124.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"95.155.151.113"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"116.140.142.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"157.230.236.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"149.107.253.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"112.121.204.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"192.162.32.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"124.165.36.151"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.200.65.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"187.67.249.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"176.126.143.0"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"196.41.84.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"92.204.138.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"157.245.130.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"213.230.78.75"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"5.138.198.113"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"152.172.228.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"14.192.213.143"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"85.175.197.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"39.34.194.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"102.96.164.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"179.174.147.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"78.26.151.165"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"200.102.196.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"37.32.73.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"189.203.100.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"93.107.209.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"46.172.83.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"honeypot-attacker; provenance=observed; sensor=do-nyc1","ip":"77.226.173.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:observed","honeypot","credential_success","post_exploit_cmds"],"labels":{"score":32,"family":"honeypot_attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"171.25.193.77"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.42.116.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.220.101.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.220.101.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.220.101.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.220.101.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.220.101.0"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"104.244.72.115"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.42.116.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.42.116.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.42.116.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.42.116.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.220.101.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","attacker"],"labels":{"score":78,"family":"attacker"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"13.94.254.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:319739"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"194.224.249.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:309508"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"52.157.207.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:194780"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:96279"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"143.244.186.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:92007"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"18.116.198.191"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:59907"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.198.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41378"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.198.103"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41346"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.198.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41332"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.122.204.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41221"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.113.115.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41164"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"91.240.118.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41148"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"62.204.41.205"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:41094"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.198.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:40959"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"62.233.50.245"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:40869"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.81.68.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:40860"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.198.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:40261"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.196.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:39822"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.108"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:34020"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"49.88.112.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:32881"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.123"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:28149"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:27407"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:27006"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.93.201.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:25622"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"77.83.36.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:25152"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"66.240.219.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:25108"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.73.124.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:24988"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"216.127.175.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:23788"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"216.127.190.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:23787"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"170.178.223.145"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:23774"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"23.234.215.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:23689"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"92.255.85.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:23585"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.65.246.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:21369"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.65.246.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:21185"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"194.26.29.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:20898"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.161.184.151"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:20450"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.20.186.68"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:19752"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"85.145.131.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:19672"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"49.88.112.68"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:19477"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"79.124.59.154"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:19162"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"154.53.57.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:18810"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"23.94.163.118"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:18295"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"154.53.58.77"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:18231"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"128.22.166.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:18036"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"23.94.236.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:17887"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.3.111.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:17859"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"210.149.87.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:17453"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"109.106.251.95"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:17096"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"210.149.87.84"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:16296"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"150.66.45.69"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15953"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"212.70.149.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15790"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"23.94.236.154"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15694"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"210.149.87.83"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15634"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"133.36.50.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15409"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"128.22.163.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15209"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"66.94.120.125"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:15019"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"210.149.87.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14695"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"154.53.57.220"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14615"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"195.226.194.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14512"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"210.149.87.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14502"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"192.3.111.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14493"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"219.122.253.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14480"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"179.60.147.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:14241"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13993"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13785"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"20.106.77.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13764"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13416"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"79.124.62.130"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13398"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"79.124.62.82"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13305"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"79.124.62.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:13245"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12938"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"150.66.51.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12919"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.246.220.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12887"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"79.124.62.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12635"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.51"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12298"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"212.70.149.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12219"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.93.201.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12183"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"164.92.136.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12071"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"92.63.197.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:12000"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11416"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11359"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"92.63.197.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11281"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.156.73.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11225"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11205"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"51.89.255.217"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11052"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"80.66.66.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:11031"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"71.115.205.1"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10717"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.143.203.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10616"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"146.88.240.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10550"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"178.128.206.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10406"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"212.70.149.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10389"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"212.70.149.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10362"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"152.89.196.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10229"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.252"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10196"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"20.225.220.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10046"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.156.73.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:10018"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"218.92.0.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9928"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"46.161.27.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9688"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.224.128.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9647"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9606"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"80.82.77.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9546"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"50.203.212.217"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9516"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9409"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"66.29.136.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9313"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"66.35.60.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9111"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"164.92.136.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:9061"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.58.60.205"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8767"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.203"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8743"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8734"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.68"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8726"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.143.200.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8702"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"20.125.141.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8612"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"64.112.72.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8549"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.143.200.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8546"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8515"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"104.248.42.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8360"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"61.177.173.22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8145"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8108"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.156.73.157"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8057"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:8011"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7975"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7954"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"212.70.149.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7940"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"92.63.197.133"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7912"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"5.188.87.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7870"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"181.64.10.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7756"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"107.189.1.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7735"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"87.246.7.70"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7618"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.156.73.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7483"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"216.39.253.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7423"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"92.205.165.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7420"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"87.246.7.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7415"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"66.29.147.113"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7338"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.227.253.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7299"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"198.58.115.123"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7077"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"46.17.102.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:7068"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"46.148.40.168"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6953"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"64.39.106.108"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6928"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"64.112.72.210"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6874"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6835"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"212.70.149.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6799"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.134.144.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6709"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6537"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"179.60.147.157"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6536"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6494"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"195.133.20.253"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6438"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.27"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6417"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6380"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"179.43.177.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6350"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.81.68.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6327"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"97.85.120.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6124"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:6103"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"5.189.157.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5956"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"91.240.118.245"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5916"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5891"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"80.66.77.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5838"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.227.254.54"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5830"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"171.22.30.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5812"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5803"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5727"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5689"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"92.255.85.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5675"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5662"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.83"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5659"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"185.81.68.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5635"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5623"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"200.10.10.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5619"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.91"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5614"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5605"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5605"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"45.93.16.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5596"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5592"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.81"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5588"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5567"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.85"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5560"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.82"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5546"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.84"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5540"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5534"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5524"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.111"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5516"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.97"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5498"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5481"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5464"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.95"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5451"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5451"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"61.177.173.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5436"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"138.197.32.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5425"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.163.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5408"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"176.111.174.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5378"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"138.99.216.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5353"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5322"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"5.188.206.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5253"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5239"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"61.177.172.19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5143"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"89.248.165.197"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5129"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5124"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"94.102.61.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5098"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"78.128.113.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5052"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"70.77.3.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:5049"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"80.82.77.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dshield","reports:4930"],"labels":{"score":52,"family":"mass_scanner"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.212.225.99"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":42,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.10.134.138"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":42,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.172.236.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":42,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":2,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.47.174.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":42,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.201.104.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.110.11.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.12.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.38.3.107"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.39.150"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.130.63.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":40,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.0.164.165"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.10.182.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.14.106.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.14.165.193"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.14.64.225"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.14.77.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.15.173.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.162.197.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.162.247.182"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.169.210.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.192.80.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.2.161.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.20.143.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.20.163.233"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.20.175.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.202.192.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.203.174.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.204.206.182"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.209.110.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.214.117.218"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.214.197.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.214.214.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.214.42.172"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.222.42.237"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.227.228.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.234.20.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.234.234.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.234.27.159"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.235.192.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.237.155.150"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.237.156.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.237.74.84"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.238.106.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.241.24.154"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.243.129.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.243.244.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.247.245.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.250.67.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.250.67.190"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.251.80.19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.255.171.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.32.207.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.32.52.191"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.38.220.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.53.239.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.53.61.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.54.206.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.85.42.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.86.233.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.92.121.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.92.159.64"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.95.155.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.95.172.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"1.95.91.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"100.53.85.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"100.54.149.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"100.55.48.57"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.100.194.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.11.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.129.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.130.208"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.130.65"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.141.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.141.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.143.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.155.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.157.138"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.22.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.23.159"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.24.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.24.71"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.26.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.4.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.4.240"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.46.108"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.53.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.54.245"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.54.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.54.95"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.55.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.55.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.64.76"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.66.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.67.70"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.68.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.71.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.81.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.81.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.82.218"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.126.91.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.2.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.3.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.4.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.4.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.4.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.4.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.33"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.5.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.6.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.13.6.91"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.132.248.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.133.170.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.168.18.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.1.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.182.12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.221.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.48.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.52.133"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.89.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.200.91.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.201.226.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.201.67.225"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.205.122.213"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.206.107.245"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.206.211.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.227.203.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.227.52.175"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.230.144.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.251.197.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.255.105.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.26.42.109"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.1.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.128.193"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.145.199"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.170.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.191.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.240.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.243.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.244.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.32.251.22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.33.55.172"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.33.68.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.34.229.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.34.249.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.34.54.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.34.55.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.34.59.249"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.34.76.191"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.35.232.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.35.241.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.35.248.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.35.52.129"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.35.91.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.104.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.106.145"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.106.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.107.233"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.108.213"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.109.176"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.111.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.111.155"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.111.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.116.232"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.117.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.117.42"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.119.203"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.122.139"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.122.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.122.190"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.124.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.125.72"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.127.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.36.228.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.37.158.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.37.22.103"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.42.11.47"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.42.158.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.42.41.164"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.43.170.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.43.171.225"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.43.5.148"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.43.58.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.43.77.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.43.86.204"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.134.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.14.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.142.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.143.205"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.15.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.15.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.152.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.155.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.156.170"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.156.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.158.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.158.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.159.125"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.159.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.163.225"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.18.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.19.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.27.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.8.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.8.188"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.47.8.43"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.50.83.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.53.236.155"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.53.248.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.68.5.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.69.180.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.76.248.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.79.165.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.79.165.43"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.79.165.65"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.79.167.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.79.23.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.89.141.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.89.148.7"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.89.182.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.89.76.249"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.91.114.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.91.126.150"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.91.192.9"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.101.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.192.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.192.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.192.231"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.192.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.192.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.193.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.195.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.195.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.195.253"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.195.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.197.182"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.199.188"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.199.69"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.200.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.200.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.200.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.202.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.202.177"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.202.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.202.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.203.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.208.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.214.98"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.220.237"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.221.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.221.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.229.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.96.230.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"101.99.37.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.0.0.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.110.11.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.110.7.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.110.7.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.117.25.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.147.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.50.1"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.50.232"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.50.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.185"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.247"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.51.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.52.113"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.52.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.52.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.52.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.52.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.125"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.168"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.220"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.243"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.53.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.54.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.164"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.197"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.5"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.55.76"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.151"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.171"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.2"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.56.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.57.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.57.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.57.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.57.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.57.70"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.59.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.59.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.59.220"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.59.240"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.59.27"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.59.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.60.1"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.60.11"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.60.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.60.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.60.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.60.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.209"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.230"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.233"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.64"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.61.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.123"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.193"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.222"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.59"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.68"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.62.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.111"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.123"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.140"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.63.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.81.21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.129.81.85"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.140.97.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.141.43.218"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.141.50.55"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.141.51.164"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.16.125.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.17.216.139"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.176.94.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.180.220.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.182.241.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.182.241.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.182.68.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.182.92.126"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.189.58.221"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.203.200.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.203.41.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.204.199.226"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.205.217.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.206.113.255"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.206.222.35"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.208.185.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.208.96.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.209.119.140"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.209.192.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.125.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.146.231"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.148.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.148.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.149.105"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.149.236"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.210.82.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.211.147.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.211.152.138"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.211.234.141"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.211.7.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.213.251.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.213.34.99"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.213.9.78"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.214.138.174"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.215.34.112"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.203.228"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.203.245"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.203.253"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.219.24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.236.218"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.237.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.240.60"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.240.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.253.47"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.216.27.83"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.218.89.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.219.126.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.219.163.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.219.170.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.219.201.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.219.210.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.22.217.76"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.151.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.148"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.239"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.29"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.39"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.47"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.63"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.160.67"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.220.85.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.221.220.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.222.132.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.222.172.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.223.58.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.223.92.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.23.122.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.23.172.145"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.36.141.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.37.156.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.38.3.104"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.53.15.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.53.15.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.53.15.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.153.212"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.101"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.119"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.46"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.32.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.33.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.33.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.33.148"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.33.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.33.84"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.33.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.209"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.215"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.34.62"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.175"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.210"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.244"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.247"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.6"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.77"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.35.79"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.169"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.203"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.231"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.248"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.64"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.36.96"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.121"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.147"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.159"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.37.83"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.38.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.38.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.38.76"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.39.111"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.39.132"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.39.138"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.39.247"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.39.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.40.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.40.213"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.40.216"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.40.235"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.40.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.40.94"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.41.185"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.41.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.41.227"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.41.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.41.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.124"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.13"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.149"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.191"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.251"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.42.89"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.43.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.43.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.43.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.44.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.44.31"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.44.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.45.125"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.45.227"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.45.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.45.65"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.46.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.46.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.46.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.46.50"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.47.102"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.47.133"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.47.170"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.64.47.48"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.66.0.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.66.144.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.66.146.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.66.146.92"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.66.181.28"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.66.181.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.68.84.17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.68.99.52"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.70.104.200"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.88.107.221"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.88.137.145"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.88.137.213"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.88.137.80"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.89.12.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.89.68.137"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.89.85.207"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.90.126.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.90.34.90"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.91.123.220"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"102.98.88.30"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.1.64.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.100.208.154"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.100.209.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.100.211.40"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.100.216.56"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.100.84.116"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.101.117.73"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.101.206.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.101.216.26"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.101.52.208"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.102.74.4"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.103.20.239"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.103.245.61"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.103.245.7"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.103.53.44"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.104.127.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.104.127.167"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.104.127.49"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.104.210.41"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.104.214.8"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.105.176.70"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.105.208.213"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.105.53.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.104.25"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.154.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.188.32"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.194.74"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.200.58"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.79.242"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.106.79.66"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.107.60.45"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.108.67.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.110.149.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.110.34.131"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.110.48.241"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.110.6.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.110.81.114"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.111.228.36"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.111.6.121"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.112.173.87"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.112.20.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.112.224.81"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.112.245.85"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.112.54.86"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.113.105.228"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.114.139.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.114.146.178"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.114.147.217"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.115.40.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.115.41.16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.115.48.20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.115.48.229"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.117.14.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.117.150.82"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.117.56.120"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.117.57.134"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.118.199.234"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.118.28.15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.118.29.127"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.118.82.254"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.119.94.10"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.120.116.162"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.120.227.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.121.38.163"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.121.7.93"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.122.221.179"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.122.34.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.122.67.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.123.113.169"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.123.225.3"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.123.53.88"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.124.238.130"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.124.93.232"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.125.103.201"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.125.177.250"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.125.179.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.125.179.37"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.129"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.135"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.139"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.144"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.145"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.146"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.149"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.153"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.156"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.170.157"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.32.106"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.48.249"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.127.7.120"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.180"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.181"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.183"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.184"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.185"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.186"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.187"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.189"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.192"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.193"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.194"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.195"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.196"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.114.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.134.206"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.134.238"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.129.221.202"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.206.100"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.206.122"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.206.142"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.206.152"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.206.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.207.166"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.207.34"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.211.38"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.13.42.19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.130.167.198"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.130.18.14"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.130.196.110"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.130.213.223"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.131.144.53"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.131.184.211"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.131.213.173"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.131.61.136"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"scanner-bruteforce; provenance=feed","ip":"103.132.237.18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","brute_force"],"labels":{"score":36,"family":"brute_force"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"1.10.16.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"1.19.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"1.32.128.0/18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.26.75.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.27.5.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.56.192.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.57.17.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.57.122.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.57.232.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.57.234.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.58.56.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.59.152.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"2.59.153.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.42.92.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.101.86.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.105.220.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.175.189.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.183.60.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.188.236.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.230.201.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.231.63.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.252.83.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"5.252.153.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"14.128.32.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"14.128.48.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"14.152.94.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"19.200.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.129.252.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.132.164.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.137.100.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.143.16.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.146.240.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.146.241.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.146.242.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.147.52.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.147.148.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.147.156.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.147.164.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.148.144.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.164.152.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.164.153.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.172.112.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.176.184.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.235.128.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"23.247.176.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"24.137.16.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"24.170.208.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"24.233.0.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"24.236.0.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.50.63.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.99.128.0/17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.100.28.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.112.32.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.122.32.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.123.208.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.124.0.0/18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.124.17.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.124.41.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.126.160.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.146.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"27.255.85.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.43.185.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.56.52.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.56.209.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.57.184.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.57.216.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.76.32.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.129.49.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.217.252.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"31.222.236.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.0.8.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.0.128.0/17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.37.48.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.116.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.119.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.255.97.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.255.98.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.255.216.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"36.255.236.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"37.49.148.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"37.72.140.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"37.77.150.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"37.140.251.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"37.156.64.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"38.18.13.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"38.92.184.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"38.107.120.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"40.183.136.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.128.0/17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.150.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.222.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.223.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.224.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.225.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.226.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.229.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.230.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.71.240.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.79.219.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.138.192.0/18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"41.231.240.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"42.0.32.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"42.0.128.0/17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"42.128.0.0/12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"42.160.0.0/12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"42.208.0.0/12"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.226.17.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.228.157.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.228.159.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.229.52.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.229.240.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.231.220.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.236.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.239.104.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.240.12.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.248.40.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"43.249.92.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.3.62.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.9.168.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.11.76.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.13.37.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.13.186.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.13.213.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.15.21.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.41.128.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.42.80.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.64.52.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.64.74.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.65.32.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.66.117.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.66.118.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.7.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.10.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.16.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.40.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.47.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.57.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.59.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.74.61.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.80.37.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.80.158.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.80.248.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.83.28.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.83.31.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.87.249.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.88.186.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.91.227.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.92.1.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.93.20.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.94.31.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.114.184.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.114.200.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.116.76.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.116.224.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.117.140.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.121.204.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.125.12.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.125.32.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.125.33.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.125.66.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.129.187.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.132.180.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.133.73.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.133.173.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.133.246.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.135.48.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.135.193.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.135.194.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.136.5.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.137.201.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.138.16.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.139.104.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.141.12.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.141.56.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.141.58.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.141.84.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.141.215.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.142.152.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.142.155.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.142.193.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.143.158.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.143.201.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.144.212.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.148.10.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.150.34.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.152.149.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.153.34.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.154.98.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.154.244.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.156.87.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.170.247.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","lacnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.192.178.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.192.211.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.194.92.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.197.176.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.197.177.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.197.178.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.197.179.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.221.116.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","afrinic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.230.66.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","lacnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"45.248.88.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"46.151.182.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"46.173.240.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"46.174.204.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"49.89.240.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"49.156.160.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"49.238.64.0/18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"57.14.0.0/15"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"57.37.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"58.2.0.0/17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"58.147.0.0/17"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"59.155.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"60.200.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"60.233.0.0/16"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"61.11.224.0/19"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"61.45.251.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"62.60.130.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"62.60.131.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"62.60.135.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"62.60.188.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"62.60.226.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"62.204.41.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"63.80.8.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.15.0.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.77.128.0/18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.89.160.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.89.160.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.92.224.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.116.200.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"64.250.144.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"65.166.249.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"65.205.64.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"65.216.208.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"66.198.225.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"67.219.208.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"69.40.207.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"69.165.0.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"74.114.148.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.0.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.36.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.40.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.42.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.52.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.60.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"76.74.78.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","arin"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.36.112.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.47.178.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.47.242.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.81.84.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.81.86.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.81.89.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.83.39.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.90.154.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.90.185.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.91.65.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.91.119.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.109.3.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"77.244.221.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"78.40.143.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"78.153.140.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"79.124.62.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.66.84.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.94.92.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.94.92.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.94.95.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.97.47.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.208.192.0/20"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","apnic"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"80.244.11.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"81.28.110.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"81.30.98.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"81.30.107.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"81.94.150.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"81.94.159.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"82.135.156.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"82.135.228.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"83.175.0.0/18"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"83.217.208.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"83.217.209.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"83.218.218.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"84.54.33.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.11.167.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.114.120.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.121.4.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.122.129.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.158.149.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.203.26.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.203.46.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.208.212.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"85.237.194.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.54.25.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.104.222.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.104.224.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.2.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.6.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.176.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.178.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.186.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.229.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.105.230.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.10.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.13.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.14.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.80.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.94.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.106.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.110.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.140.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.106.174.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.107.72.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.107.193.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.107.194.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"86.111.228.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"87.121.84.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"87.228.25.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"87.228.109.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"87.228.110.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"87.228.112.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"87.251.79.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"88.210.63.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.18.16.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.18.20.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.23.126.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.32.43.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.32.170.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.32.202.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.33.46.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.33.134.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.33.206.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.33.250.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.33.254.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.34.0.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.34.4.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.34.102.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.34.104.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.35.89.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.35.90.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.36.136.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.36.141.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.37.96.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.37.136.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.38.240.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.39.69.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.39.215.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.40.138.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.40.207.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.40.209.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.41.50.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.43.50.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.45.34.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.45.82.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.46.47.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.106.83.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"89.190.156.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.92.40.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.92.240.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.188.254.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.200.133.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.200.164.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.202.233.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.204.224.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.206.169.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.214.109.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.215.85.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.218.236.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.220.163.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.224.92.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.229.52.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.231.222.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.232.18.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.233.0.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.235.130.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.240.118.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.243.93.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.246.43.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"91.246.176.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"92.63.197.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"92.87.6.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"92.118.39.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"92.242.62.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"92.255.57.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"92.255.85.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.90.72.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.92.72.0/21"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.51.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.52.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.54.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.55.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.58.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.99.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.114.187.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.115.59.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.119.118.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.119.120.0/23"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.123.109.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.152.219.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.152.223.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.177.76.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"93.187.128.0/22"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"94.26.38.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"hostile-netblock; provenance=feed","ip":"94.26.88.0/24"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","spamhaus-drop","ripencc"],"labels":{"score":92,"family":"hijacked_netblock"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/meow.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","sh"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.sparc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/i586"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://72.56.52.158/ass"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.mips64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/gpon443"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/wow"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/thinkphp"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/mips2"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/aws"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/ppc440"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/sys64.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/dmpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/lg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://91.92.40.13/run.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/hnap"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/realtek"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/huawei"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/zte"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/pulse"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://72.56.52.158/x"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/zyxel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/goahead"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/o.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/yarn"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/no_killer/mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/proxy/mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/no_killer/aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/i586"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/nigger/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/coke.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/sharp.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/toto.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/jaws.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/Sgsa"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.110.105/fSegv"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/fSegv"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.110.105/Sgsa"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.5.124.6:35918/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.185.91.8:52353/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.5.124.6:35918/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.42.33.2:54415/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/armv4l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/armv5l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/armv7l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.42.33.2:54415/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.247/i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.56.161.81:37957/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.245.111.51:60121/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://114.67.87.14:60125/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.213.23.56:60134/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.222.247.229:60132/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.237.124.1:60108/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.237.127.21:60124/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.237.167.249:60128/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.236.180.235:60136/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.241.116:60106/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.210.218:60139/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.69.227:60133/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.169.170:60119/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.236.70.102:60108/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.236.122.72:60123/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.62.229:60143/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.222.179.91:60122/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.155.47:60149/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.226.68.236:60128/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.245.84.42:60116/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.236.28.220:60115/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.236.146.147:60134/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://49.235.101.101:60147/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://8.219.85.120:60142/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.236.172.100:60117/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","P2Pinfect","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/dddd.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.spc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://reavercncv4.duckdns.org/rva_bins/rva.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.56.161.81:37957/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.47.23:54371/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://alphalkenya.com/VSooNlFLuZpdMiw.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","exe","Formbook"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/cli"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ladvix","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/Error84"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/cliaarch"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/boss"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ladvix","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/main"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ladvix","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.spc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva_bins/rva.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/traffaarch"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://216.9.226.120/nuts/bolts"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","CoinMiner","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/nvidia.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","ladvix","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/traff"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/checkmacos.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/auto"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/dddd.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.187/rva.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/auto1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","ladvix","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/check.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","ladvix","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.211/check1.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","CoinMiner","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/LjEZs/spc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.238/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.242/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.241/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://2goelectricity.co.za/MSI_213534.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","rat","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.121.179.166:53602/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.230/iran.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-230","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.230/iran.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-230","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.230/iran.aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-230","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.powerpc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.mipsrouter"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.sparc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/telnet.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/cat.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.armv7l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.armv6l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.armv5l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.226/iran.armv4l"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-226","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.230/telnet.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-230","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.230/cat.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-230","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/parm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/parm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/parm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/parm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/pppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/psh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/pmpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/px86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/pspc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/pm68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.229/bins/pmips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-229","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/tplink.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.234/rebirth.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-234","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.236/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-236","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.240/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-240","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://39.74.53.25:55617/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.244/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-244","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.237/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-237","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.i486"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://89.189.181.54:34451/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.243/static/js/sdfjgnjsdf.arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-243","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/pmips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/parm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/pppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/parm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/parm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/parm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/parm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/pmpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/psh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/kla.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/kla.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/parm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/pmips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/parm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/pm68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/bins/px86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/parm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/psh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/pppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/pm68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/px86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/pmpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.196/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-196","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.121.179.166:53602/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://196.189.35.172:40485/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://rcf.co.mz/Volcano9.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","exe","PureLogsStealer"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://seniorsushi.com/PPK/RAWFILES.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","exe","opendir","rat","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://api.mineblack.lol/bot.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/x86_32"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://219.155.192.208:40793/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/tvt/mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.14.43.20:36177/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/bins.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.166.194.8:35798/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.252.159.78:57590/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.215.44.220:42289/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.110.61.156:54807/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/ppc440"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://219.154.181.58:50132/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.48.149.86:37512/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://219.157.52.254:39042/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://136.60.32.162:36863/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.113.201.103:43353/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.179.254.223:44858/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/x86_32"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.1.226.175:38386/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.127.154.48:44547/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://110.39.249.174:41741/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://116.149.19.3:33747/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.114.198.5:48196/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.110.61.156:54807/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://api.mineblack.lol/jaws"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.109.140.49:40757/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.50.150.5:40794/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.148.236.155:60439/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.148.236.155:60439/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.173.78.13:52046/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.147:33487/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.235.174.78:56482/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://120.84.215.125:39910/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.215.126.58:44400/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://110.39.249.174:41741/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.55.246.222:57542/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.234:49323/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.235.75.164:57996/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.86.172.171:41089/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.166.194.8:35798/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/ppc440"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.54.158.77:42338/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.204.233.111:38853/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://196.189.98.110:33070/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.100:38107/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/x86_32"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.41.226.101:43998/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.137.197.66:51494/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.228.216.110:54566/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.14.193.241:34414/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.127.220.233:54104/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.12.30.36:60566/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.167.85.100:49899/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.93.138.83:40373/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://120.28.194.160:52311/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.113.201.103:43353/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.230.81.126:50462/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.202.17.138:38962/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.52.146.164:54323/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://205.237.110.232/tvt/i586"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://219.154.181.58:50132/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.49.114.109:46437/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.234:49323/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.230.40.119:58107/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://86.98.154.146:19091/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.21.31.81:59239/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.179.254.223:44858/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.147:33487/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.8.90.59:40206/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.106.68:36906/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.43.107.232:46123/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.56.159.152:47624/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.237.52.185:33904/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/release/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.172:59880/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.219.14:47408/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.127.154.48:44547/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.167.85.100:49899/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.121.180.159:41148/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.230.40.119:58107/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://120.84.213.21:46712/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.180.66.105:43207/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.137.214.37:48901/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.121.106.64:52025/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.127.220.233:54104/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.224.175.231:41660/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.202.17.138:38962/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.1.226.175:38386/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.116.39.158:45878/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://124.92.80.153:35984/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.176.120.191:54769/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.172:59880/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://1.20.91.236:53593/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.189.160.169:47495/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.43.44.201:48800/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.215.44.220:42289/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.55.246.222:57542/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.126.95.214:33968/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.8.90.59:40206/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.165.236.61:47227/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.106.68:36906/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.43.44.201:48800/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.56.159.152:47624/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.40.158.110:41707/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://213.66.220.87:50871/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.54.158.77:42338/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.41.226.101:43998/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://110.37.106.220:47631/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://140.237.36.213:34302/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.63.50.235:56719/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://37.52.247.235:47637/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://voltagec2.tech/release/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","botnetdomain","censys","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.233.65.130:37441/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.21.31.81:59239/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.121.106.64:52025/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://196.189.98.110:33070/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://213.66.220.87:50871/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/x86_64nosl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/main.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.spc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/a-r.m-5.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/s-h.4-.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/i-5.8-6.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/m-p.s-l.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/m-6.8-k.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/p-p.c-.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/a-r.m-4.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/m-i.p-s.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/spc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/a-r.m-6.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://181.214.136.12/hiddenbin/Mystic.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/LjEZs/sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/d/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.114.194.171/t"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/0x83911d24Fx.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.199/bins.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/d"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/jaws"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://31.77.227.111/ohshit.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/bins.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/Sakura.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","gafgyt","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/a-r.m-7.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.154.43.97/bins/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/x86_32"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.118.132.61/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/x-8.6-.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://62.84.172.106/dlr.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://23.251.34.31/x-3.2-.Sakura"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","gafgyt","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.255.97.21/bot.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","xworm"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.5.204.221:40942/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.5.204.221:40942/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://signageinsignia.co.za/kizzy/1.jpg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Formbook"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://verdiva.life/admin/MSI_PRO.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.172.254/img/img_050827.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","xworm"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","xworm"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://185.29.9.101/Standardpakke.toc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","GuLoader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.37.102.150:54475/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://185.29.9.108/nVgXuGSv49.bin"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla","GuLoader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla","GuLoader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://185.29.9.108/Mistakeful.pfb"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla","GuLoader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://193.104.58.65/yurumpmonday.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AsyncRAT","rat"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.230.25.51:39898/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.230.25.51:39898/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","js","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","js","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/img/img_220049.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","png-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/img/img_185156.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","png-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://216.9.224.73/50/img_193544.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","png-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/img/img_005200.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","png-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","png-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://192.255.195.158/img/1.jpg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://216.9.224.73/33/img_190847.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.172.216/125/img_000358.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.173.9.104/img/2.jpg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://192.255.195.150/img/1.jpg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/46/img_210045.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://216.9.224.73/50/img_193544.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/img/img_005200.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/img/img_185156.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/img/img_220049.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","jpg-base64-loader"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.37.102.150:54475/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.238.17/23/uks.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.238.16/8/ssn.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.238.16/42/dmw.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.238.17/23/uks.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.238.16/42/dmw.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.238.16/8/ssn.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","exe"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.238.17/23/ecv/sccsq.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.238.17/23/ecv/sccsq.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://140.237.37.249:40109/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://signageinsignia.co.za/kizzy/1.jpg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://sh.classera.com/Naew8m"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","censys","hta","redir-302"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://140.237.37.249:40109/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://155.103.69.250/46/img_210045.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","rat","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.172.172.216/125/img_000358.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","rat","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.173.47.72/22/img_172149.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","rat","RemcosRAT"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://del.sou.pp.ua/install.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","honeypot","shardlure"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://del.sou.pp.ua/install_tm.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","honeypot","shardlure"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://94.156.166.167:43949/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.232.108.113:57428/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://duct-master.com/00/newMSI_PRO.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.49.203.6:36171/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.192.88.110:35897/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.224.17.122/pinmsi.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","xworm"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://64.224.17.122/pin_img.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","xworm"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","195-177-94-22","connectwise","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://195.177.94.22/bin/support.client.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","195-177-94-22","connectwise","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.228:6677/bins/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/FyTv"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/1sPM"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/4YN"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/1Gk"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://129.121.114.124/WzCx"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.49.203.6:36171/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://195.177.94.84/bin/support.client.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","195-177-94-84","connectwise","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","195-177-94-84","connectwise","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","195-177-94-197","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://94.154.32.99/bin/support.client.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","94-154-32-99","connectwise","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","94-154-32-99","connectwise","exe","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.228:6677/bins/mipsel"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.228:6677/bins/x32"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://209.141.44.218/ohshit.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","209-141-44-218","mirai","sh","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://209.141.44.218/hiddenbin/boatnet.arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","209-141-44-218","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://209.141.44.218/hiddenbin/boatnet.arc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","209-141-44-218","elf","mirai","ua-wget"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.228:6677/bins/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.228:6677/bins/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.228:6677/Exodus.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.129.131.159:42876/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.5.173.164:46012/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://140.237.36.213:34302/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://110.36.86.83:33716/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.52.217.13:59440/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.223.124:58798/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.232.108.113:57428/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.230.37.213:45304/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.52.217.13:59440/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","54e64e","dropped-by-amadey"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.223.124:58798/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://121.234.156.10:48875/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://71.207.128.92:54954/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://211.158.166.117:51581/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://78.25.149.153:39654/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.21:51285/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.147.159.41:36190/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.180.15.83:57232/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.21:51285/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.172.13.19:60669/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://124.92.80.153:35984/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.43.60:47091/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"High","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.173.101.27:46920/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":78,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.198.138.178:59015/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://95.155.151.113/d/mini.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai","opendir","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://95.155.151.113/d/mini.mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mips","mirai","opendir"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.53.51.109:44329/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://95.155.151.113/d/mini.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mips","mirai","opendir"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://95.155.151.113/d/mini.arm64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","arm","elf","mirai","opendir"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://95.155.151.113/d/mini.x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","elf","mirai","opendir","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://95.155.151.113/d/mini.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","arm","elf","mirai","opendir"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.235.94.77:54061/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.235.94.77:54061/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.198.138.178:59015/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.8.90.13:33466/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.127.103.153:37513/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.58.177.86:33235/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.198.193.62:36489/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","arm","elf","mirai","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.198.193.62:36489/Mozi.a"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","arm","elf","mirai","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.198.193.62:36489/Mozi.m"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","arm","elf","mirai","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.205.10.123:45052/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://39.77.117.255:35209/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://60.18.11.118:36365/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.205.10.123:45052/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://124.235.239.199:45573/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://39.77.117.255:35209/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.235.174.78:56482/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.55.57.227:57005/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.48.28.98:35726/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.234.166.234:40751/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://60.18.11.118:36365/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.116.20.47:46175/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.116.20.47:46175/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://183.153.126.58:36155/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.58.177.86:33235/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.247.84.112:59435/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","c2-monitor-auto","dropped-by-amadey"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.63.51.94:48009/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.61.41.247:51273/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://78.25.149.153:39654/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.61.41.247:51273/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.248.106.46:52448/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.aarch64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.sh4"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.i686"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://176.65.139.232/bot.arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","176-65-139-232","elf","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.109.219.147:35136/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://112.247.84.112:59435/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.50.98.44:53110/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.113.203.98:49336/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.239.96.147:46916/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.15.192.179:36837/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.49.64.77:52921/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.167.183.194:52110/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.5.94.63:4370/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://130.12.182.77/blink.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","opendir","sh","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.167.183.194:52110/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.113.37.79:56846/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.113.203.98:49336/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.219.74.117:52755/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.113.37.79:56846/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://107.175.88.87/23/img_185335.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","rat","RemcosRAT"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://172.245.195.245/35/img_190431.png"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","rat","RemcosRAT"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://rcf.co.mz/Godabeg1.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","exe","PureLogsStealer"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://121.234.156.10:48875/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://130.12.182.77/tvt.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","opendir","sh","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://130.12.182.77/dvr.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","opendir","sh","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.121.143.204:58754/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.231.88.100:39090/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.37.100.78:38525/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://chrome-windows.ru/ChromeSetupWindows.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","exe"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://37.78.176.5:45921/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","54e64e","dropped-by-amadey","LummaStealer"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://109.236.46.199:42682/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://121.231.139.26:36392/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://58.22.18.152:33899/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://109.236.46.199:42682/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://58.22.18.152:33899/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.134.41.212:48460/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","91-92-243-232","connectwise","exe","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://91.92.243.232/bin/support.client.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","91-92-243-232","connectwise","exe","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.134.41.212:48460/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://130.12.209.147:55609/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.137.204.59:51581/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.137.204.59:51581/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://47.84.190.146:9593/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.23.55.232:7702/linux"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://96.245.232.132:44492/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://120.84.213.21:46712/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://103.80.57.126:54698/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.180.11.230:34276/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.146.211.156:47338/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.148.29.181:47643/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.234.185.8:38535/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.228.149.193:49576/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.116.107:43623/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.58.131.62:38469/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.104.156:32771/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.51:46526/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://105.186.64.242:41071/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://120.28.135.245:34017/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://45.170.224.217:57287/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.86.136.138:39726/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.115.68.225:51187/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.180.15.83:57232/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.196.6:60240/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.196.6:60240/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.55.212.26:51890/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://122.139.13.204:51081/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://122.139.13.204:51081/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://45.170.224.217:57287/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.52.156.140:46601/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.52.33.100:54465/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://115.62.148.107:57509/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.74:36898/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.52.204.44:32770/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.200.107.56:39903/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.110.42:48403/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.15.192.179:36837/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.137.177.124:50033/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://103.80.57.126:54698/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.146.211.156:47338/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.190.20.88:42140/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.147.159.41:36190/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.115.68.225:51187/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.74:36898/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.182.123.61:50511/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.86.136.138:39726/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://61.52.33.100:54465/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://37.78.176.5:45921/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://59.58.42.82:51830/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.116.107:43623/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.58.131.62:38469/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.147.220.91:36766/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.190.20.88:42140/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://1.20.91.236:53593/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.147.220.91:36766/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.157.253.209:37860/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://113.231.229.97:60941/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://93.157.253.209:37860/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://83.68.249.16:45432/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.104.156:32771/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.46.213.70:47197/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.228.39.67:45035/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://221.15.218.63:33777/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.228.39.67:45035/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://185.29.9.108/Virginalling.asi"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla","ascii","Encoded","GuLoader"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://185.29.9.108/gchLdNMan179.bin"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","AgentTesla","encryptred","GuLoader"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.24.12.180:50663/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.127.103.153:37513/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.12.234.37:36560/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.100:38107/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://27.24.12.180:50663/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://210.208.111.220:36372/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.224.67.199:54598/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.224.67.199:54598/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","None"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.111.210.192:51471/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://217.60.195.143/bot"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/x86"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/arm"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/mpsl"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/arm7"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/mips"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/arm5"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/x86_64"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/ppc"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/m68k"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://43.98.174.233/release/arm6"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.43.60:47091/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://105.186.82.28:41113/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.45.148.93:57695/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","backdoor","Dapato","rat","SilverFox"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://130.12.180.141/ScreenConnect.ClientSetup.exe"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","130-12-180-141","connectwise","exe","ua-wget"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://105.186.82.28:41113/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://117.26.226.42:41542/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.153.92.244:48563/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.117.165.9:33305/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.44.47.23:54371/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.153.92.244:48563/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.140.161.119:54327/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.235.75.164:57996/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.71.24.56:48673/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://36.71.24.56:48673/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","arm","elf","mirai"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","54e64e","dropped-by-amadey","PureLogsStealer"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.179.237.64:40459/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://42.234.166.234:40751/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.13.106.196:55036/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.14.193.241:34414/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://222.140.161.119:54327/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://119.179.237.64:40459/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://182.123.40.234:41791/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.10.145.33:33546/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://125.43.107.232:46123/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":68,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://123.12.234.37:36560/i"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":59,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://178.16.54.109/bolodo"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","dropped-by-Phorpiex"],"labels":{"score":59,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"malware-distribution; provenance=feed","url":{"full":"http://175.175.26.181:34146/bin.sh"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","32-bit","elf","mips","Mozi"],"labels":{"score":59,"family":"malware_download"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.robiox.com.ps/users/8151803013/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bd3685.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://0ee24f.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://81cc79.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://d51b01.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://33dbae.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://53cfaf.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://guide-library-30bd.siti111856.workers.dev/privacy-information-center/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.rebrand.ly/548abc/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://imhrithik.github.io/Sound-Vibe/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://forthit.top/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.refund-paylater.online/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.logid359-hlga.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.shopeeid547.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.walletcoinbase-zeta.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.frontend-eight-gamma-89.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.claimed-gifts.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://assets-ledgrolive-learn.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://began-ledger-live-desktop-eng-us.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://app---ledger-live.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://alon-live-ledgr.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://binance-trading-bot-36q.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://advance-li-ledgrr.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://cloud-desktop-en-ledgr.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://app-ledgr-downlod.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://base-ledger-app.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://advance-ledgr-live.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://apps-ledgre-live.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://app-ledgr-livedoc.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://accss-metamsk-lgn.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://ask-ledgr-live.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://app-ledgrslive-en-us.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://access-ledgr-dextop-en.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://access-ledgr-desktop.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bing-ledgrhardwear.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://app-x-desktop-ledgre.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://access-ledger-live-desktop.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://assets-ledgrlive-eng.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ask-ledgrwalet-liv.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://access-ledgrlive-io.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://access-en-ledger-live-download.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://app-ledgrs-live.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://apps-ledgger-li.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a-desktop-live-ledgr.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rbcode.net/v/d892a96d2f3b76c82c157b1b2433d712"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://1fba23.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://netflix-clone-steel-three-83.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rakuten-two.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.rakuten-two.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.me-ta-ma-sk-log-in.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://kuocnminlogox.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.binance-referral-code-btcbonus.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://binance-referral-code-btcbonus.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://amazon-opfq.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://yetteli.sbs/flights/index.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://yetteli.sbs/packages.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://im-use-whatapp.hl.cn/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://78v6786v8.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://bridallehenga.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8b0c57.icefactory.cl/oprdlbcMyNhisYOpw3W5LPYwcpB24Psl47ukBVyjHcY2Q3EgH7yuA19j0qnAHdlU/?rotated=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://0f1bfe.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.xfinityservice.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://io-public-trzors-com.typedream.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://welcome-begin-trezo-en.typedream.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://start-io-trezr-public-cdn.typedream.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://faq-public-trezro-us.typedream.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebooklogin21.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://004e3a.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://netrajs.github.io/spotify_clone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rootmadhav.github.io/Netflix-clone-2023/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.mu/users/9813657376/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rbcode.net/v/837472845362c642183e731ccf5c32a3"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://inlnk.co/JULBW"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebookloginid.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://df9709.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://dbea2c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://75dbd9.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://c38a9f.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://48a2ba.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://23aa9d.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://52b7b2.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://21064b.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://nutritious-amethyst-jy6c7lj2.edgeone.dev/home"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://0dddf4.arcadejafet.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://startedio-trezox.zapier.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bnc-flb.web.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebookloginf.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebooksupportphonenumber12300.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.cashprolivedesk.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://web-trezor-io-start-app.typedream.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.ly/users/9623724172/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.et/games/5846386835/RetroStudio?privateServerLinkCode=28004710692762680520098075779654&game_id=5846386835&game_name=RetroStudio"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://robloxc.com.es/login?returlUrl=190934801"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://robiox.top/home"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://express-dhl-dpe3103d2mga.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://s4w.in/www-roblox-com-users-950717396-profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://tariasnot.duckdns.org/Docsign00.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://g5.lu/uk3ga"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://apps-ledgerr.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://clicks-ledger-live.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://access-us-ledger.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.mouvementacced.app/core/client/rbcroyal/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.et/users/437042725645/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.mouvementacced.app/core/client/scotia/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://dovessrbx.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://srv1888708.hstgr.cloud/rew/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://alok-kumar-sing.github.io/Amazon-Clone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp15ct-kavrex-biz-zunven-tavri.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://secure-app-tre-jor.wasmer.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://filmistanstudios.com/mails/alibaba/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://vrushali-janbhare.github.io/amazon-clone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebookloginreview.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://plaermoxred.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/games/80576062127494/HOT-Catgirl-Obby-Surprise-at-the-end-?privateServerLinkCode=89585493089521937689667490122223"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://grespayw.grespay.web.id/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://93bb9e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://e702a1.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a0330c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://b1a4fd.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://dfrespay.fdnk.biz.id/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfinityservice.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://930898.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://338874.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a0c31f.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a95e7b.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://g5.lu/p5tku"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/users/244432464839/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a004ef.icefactory.cl/z1fDlFv2ERntwcitD5KbGNZK4XsGAfD7mMGadbVv9bmihF3xzQrpO30EKqkZDuJd/?rotated=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://d482fb.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://robloxcondo.my.id/jun7x1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://7b591c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://aea1d5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebook-carol.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://perturbed-univer-d5a135.bestoptiontrade1.workers.dev/373d5a135.xlsx"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://0b2cdc.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://loginfacebookverification.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fccc69.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://efe794.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://anirudhsajeesh0.github.io/Siteclone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://laibakhan139.github.io/netflix-home-page"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://appleservices.alwaysdata.net/ref/?_fm=71a724b20779"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://s4w.in/www-roblox-com-users-9501716396-profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://2897d4.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://instagramfollowers146.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://00hwee-9rck-fuj-bvii3-y210am.pages.dev/qaz-wsx-edc-rfv?welcome=106906109377741&token248=106906109377741&name_token136=Lippert%20Marine"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.pt/games/88519281604403/Build-a-Baddie?privateServerLinkCode=99382535900423182128231632453729&game_id=88519281604403&game_name=Build-a-Baddie"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.pt/games/103372023280442/Brainrot-Tag?privateServerLinkCode=99382535900423182128231632453729&game_id=103372023280442&game_name=Brainrot-Tag"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://connec-treoz-bridge.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://biturbo.com.pk/Inbox/online.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://06249e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://5b0307.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://34711b.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://dc488c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://7f55ef.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://7d7be1.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://efe114.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://d44bd3.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://666c8b.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://4233e0.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://802811.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://733ef5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://mass-orange-drrrexhk.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://zkbsicherung.com/login"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fbf1d9.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://7ddc0a.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://yjbcei4l.rqug4s3.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://chain-swap-interface-v2.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.chain-swap-interface-v2.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfinityverifynow.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.accountfacebook.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfinity-signon.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://vormora-zxt-lenqumi-c8x1fc67.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://net16ct-toru-biz-vemi-zano.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://vnzkt819m-msprq341k-2a4e-xlb59p.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://virat-kohli10.github.io/paybox-demo"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ffacebooklogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.ffacebooklogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://newbreedlifearts.org/font/korea.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://28610d.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://metamuxsklogen.gitbook.io/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://18aafc.winnicart.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/communities/894988425313/One-Time-YT"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://connecte-bridge.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://1cadf3.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://1ecdb5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://d90a71.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://3c5d30.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://e52f7e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fab207.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://1df173.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://c67030.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://431b3d.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://5e20c6.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://robiox.com.gr/users/1062443811/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://c08923.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sock-zizifn-jp.ludea-lau.workers.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://nhzn-ju8-gh5-64ls-gfewy-4vo.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp15ct-zorqel-biz-melven-qavix.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://zanquro-zxt-melvani-p5t8dk31.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://accountservicescenter.co.za/?r=2936e486-3960-4b99-9e03-f1a94bfde3ae&rg=eu"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://qualitybh.art.br/fil/sd"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://mailer6-ver.mdbgo.io/?eta=3mail@a.b.c0/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8d073d.winnicart.com/Gm6LsNjhFl7AmAOqY4Z3yCIdBk39z8cURNcefd3tgecgnhKFIdhPPqlaUtwICbnW/?rotated=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://b000e9.winnicart.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://msjihasx.us.cc/5g/home.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fortnate.top/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://shopeeinc1111.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.shopeeinc1111.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://mxhaisyx.us.cc/5g/home.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://mksjidux.us.cc/5g/home.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fecb46.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://567536.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://validarm1c-0s00.webcindario.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://logan-blokiie-us.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://misilabario.cl/alibaba/alibaba/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.xfinityrefunds.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://0ficinavirttual4.site/index1.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://0ficinavirttual4.site/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bf5893.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8be6e8.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://aedaa5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://sp13ct-vormik-biz-frandel-kazdor.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://bai.infura-ipfs.io/ipfs/bafkreifg5u6op7zz6su3tg53j6ftrg3brcaiphlilet2wwqgobzziiunha"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://blog.ubair.com/anotherday/app/captcha.php?redirect=%2Fanotherday%2Fapp%2Findex.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://blog.ubair.com/anotherday/app/index.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp15ct-vurvex-biz-nurzen-zorli.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://9d16d5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebooksupportphonenumber12300.blogspot.com/?m=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://coderkubes.com/duke/index.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://97ee8.catex.at/cnbcard/cab3994js.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://97ee8.catex.at/cnbcard/cardentw.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://97ee8.catex.at/cnbcard/signin.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://smilling-long-pannel.edgeone.dev/?eta=torikpro@0f52f931ef5f3d9424a897162d0e1cfba9c2.com"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://ccer-hfa0fmdue4ebhcbd.z03.azurefd.net/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.mu/users/3929354400/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://deanschneideroasis.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://us-support-ledgor-en.pages.dev/page4.html/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://6062fd.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://4255e4.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://f6676d.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bd2de7.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://f73f3c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://2fa6a4.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8bfe2e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://f784a5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://3009de.icefactory.cl/htp4NS9mxacptre8XAgCjYiV4xQBm0F6YKIPhgOSaazIP4RZWyGpCO7tAstUGSpp/?rotated=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://ce5e30.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8f93ee.icefactory.cl/plQZiQcKliKJpcE0vLiUXtZ0xra45CerGQA00X13RWRPAqIHuyMpMD4oHxJ7BaLt/?rotated=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://779a0e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://cf.1689888.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://aktivasi-fiturxdana-pay3.yums.my.id/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://creditoecuador-2026--creditopichi38.replit.app/?monto=10000"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://creditopichinchaecuador-2026--creditoenline3.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://portal-de-desembolso-pc--agzc3668.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bn/games/2753915549/-Blox-Fruits?privateServerLinkCode=86312608205244302093175058016356"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://s4w.in/Blox-Fruits-private-Server-Code-86312608205244302093175058016356"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://center.verifiblueprofilesecureai.cfd/index.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://center.verifiblueaccountstatusai.click/index.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://auth.verifibluebusinesscentermetaai.click/index.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://gitnikit.github.io/phisingsitefacebook"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ucdgxfhcgjhvkjblk-dp6se8xlrpxx.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://skilled-gold-etzyiudb.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp13ct-pravdor-biz-kersik-frandel.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://secure-nexo.com/review.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://secure-nexo.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://los108.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://bogodukhov.com.ua/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://relay-fr-me.com/connexion.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://relay-fr-me.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://staticfile-kimkaro66.wasmer.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://motiva-rodoviadigital.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8bf1b6.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://4d2582.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://81ef2a.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://df63ff.icefactory.cl/ksiernCZ4HYpjtK68wPm52ZTufIAomjS1w79usIbBVc5J3nhoAQa4dqRKO0GKdyp/?rotated=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://df4f2f.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://4bc19e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://d9854f.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://97479b.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://5f98ad.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a31cf6.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://10920c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ecf7d6.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bb2f98.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://21c52f.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8feed4.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a2007f.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://1b0466.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://8b3a0a.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://f29f9b.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://b32aaf.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://a1a4ab.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ae1d2c.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://f65299.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://promt-dpem7p8ov9s7.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://641f8e.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://17cbf5.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://b268b9.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://d6dc84.icefactory.cl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-11T00:00:00Z","last_seen":"2026-08-11T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://micr0sft.github.io/fdgdfg/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":69,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://x39p.top/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.netflix-clone-opal-iota.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://mansithakur204.github.io/spotify-inspired-music-player"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.site-jn6w55wca.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.instagramfollowersfake.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.faceboomlogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://addons-moz-illa-org.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.xfmailconnect.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://nlink.at/www_roblox_com_users_7324139977_profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/users/133565866456/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.comcastxfi.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.c0nectt.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rechnungdirekt24.com/public/de.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.pt/users/282030707450/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.tranifer-bnb.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.netflix-clone-gray-iota.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.site-ah3d6z3ed.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://25f54b2b-58b1-45c3-bd24-0ee1c8e9cfd0.selstorage.ru/524/52462818748/bcb/52462818748_bcbc735fc613264a17e73dd987c14ae8.jpg"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://hnhpvt.website/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebook-2-0-dun.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://robloxc.com.es/users/190934801/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.site-mjemyma8d.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://xlbdw5avstr-ycgfnmja-8d9e2f-xlq20c.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.cancelacardiffseguro360.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://polite-bavarois-37ef3b.netlify.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://roblox.com.pt/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://virtual-personas.de/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://norqula-nqx-zentora-p1t7dw65.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://long-cake-a10a.buidebidexlvtey.workers.dev/meta.help"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://naybabuta.github.io/nay-tify/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rblox363.github.io/roblox-lg/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rblx3.github.io/rblx/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://xelmavi-vrk-belquna-p2t9dk81.pages.dev/send_appeal_request"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rblox363.github.io/rob/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://locketheart.org/proj/oneapp"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp15ct-zavven-biz-korun-qelix.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://7ro-wwv-ftvh-2np810-9v8crh.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp15ct-turqel-biz-zunax-kavro.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.gr/games/8737899170/-PIATA-MAZE-Pet-Simulator-99-?privateServerLinkCode=87969680078065820214840649414941"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://login-soporte.iceiy.com/?i=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://i.gal/ZmUim"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.hotmailskjfhurytnadinbox.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.blox-drop.online/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://goo.su/mchiajsi"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fb-faceboook.blogspot.com/?google_abuse=GOOGLE_ABUSE_EXEMPTION=ID=177b9949f8930038:TM=1785479352:C=%3E:IP=2605:fe80:2b:105:1c00:5fff:fe00:292-:S=rEAZNIrShlz_CMcj-uQ9MQ;+path=/;+domain=google.com;+expires=Fri"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rroblox.wf/share?code=96041925588136299153057679665385&type=Profile&source=ProfileShare&gameid=2753915549"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ig.do/Blox-Fruits-private-Server-Code-1013231241732343237023930417434378"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebookloginsignub.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://vismayamanoj029.github.io/amazonclone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://techwithmanishhq.github.io/Spotify-Clone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rimmisharma25.github.io/Netflix"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://fastidious-tanuki-1d7a77.netlify.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://just-aquamarine-5n8epwhf.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://trk-gol.aphipa.info/Y2gtZmVkZXgtMjAyNg/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://site-zkmjek3ad.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://raiffeisen-five.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebook-freelogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.myaccountxfinity.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://seasharetip72-ed101816bbdf.herokuapp.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://dmivok-trelna-2ed83f-vjbyh-6cb712.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://arshad-deshmukh.github.io/Amazon-Clone"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.xfiniity-update.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://mchiajsi.us.cc/5g/home.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ybfch2ekqlo-mvrqllos-7c6d3a-ybf33w.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://xfintyloginupdate.weebly.com/xfinity-sign-in.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://arubaservizispid.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://sp13ct-kersik-biz-fransor-hazvik.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.roblox.com.et/games/142823291/Murder-Mystery-2/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.16878.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.roblox.com.pt/games/142823291/Murder-Mystery-2/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://increasefollowersforinstagram.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://dinesh12966.github.io/phishing-site/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://p01--ar24docsecurity--qmjhcscz5dnb.code.run/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://site--docapost24ar--df8ybdpttf6b.code.run/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://p01--docapostar24--df8ybdpttf6b.code.run/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rittajj.onthewifi.com/metanet/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://asvxzxzwscs.eu.cc/mx"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://asvxzxzwsvg.eu.cc/es"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://panhalkarpratiksha7-jpg.github.io/Amazon_clone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://puyaaaaa.github.io/roblox-rg/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://roblox-lo.github.io/roblox-log/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://appeid.rcloud.me.farmbase.co.tz/DUVzTTavlOw/?redirection=login"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://appeid.rcloud.me.farmbase.co.tz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://codehub-amber.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://grandhoreb.com/adobe-secure/installer/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://misscroma.site/ar24/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.facebook-verification-system3.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://thisfreeinstagramfollowers.blogspot.com/?m=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://121jio.senes.at/stakings/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6MTY0NDtzOjQ6Im5vcGQiO3M6MTM6InJzcy5zYXlsZXIuYXQiO3M6MToibyI7aToxMTM2O30="}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebookloginss.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://facebooklogincc.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://duishalik.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebooklivepage.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebooklivepage.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://site-jn6w55wca.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://site-ah3d6z3ed.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://site-mjemyma8d.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bright-rectangle-577387.framer.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://site-vjgfidl3x.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://site-ibvl0r5pu.godaddysites.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://access-lieledgr-eng.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://ycgfn61lkwg-vnzktpli-4ce79c-ycg22c.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ledgre-live-en.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.comcastinc.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://msprq82nhwu-ycgfnfyn-0d3e1f-vn855a.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/users/457336501877/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://u648984.softaculous.dev/wp382/wp-content/index.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://qrsu.io/83FMW"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://powercleantank.com.au/secure/sorce/wmailt.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://allegrolokalnie.pl-013337.icu/oferta/skuter-wodny-nie-uzywany-3-lata/58304"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.z-bio.link/i92alq/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://cancelcardiffbahora.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.busanopen.org/office/msgvoice/source/Login.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.busanopen.org/office/msgvoice/source/wrongpass.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.ahhhh.pe.kr/zb41/data/1057168297/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.17564.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://homeledger.zapier.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sitio6.apps.viupay.live/sign_on.php?error="}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sitio6.apps.viupay.live/login.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://njj.standard.us-east-1.oortstorages.com/docusign.doc?EMAIL=salex7@39b4c67e055d587064c1010f577bff8257a6.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://facebooksignuplogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facebooksignuplogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ghein4.systeme.io/spectrum"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://vvrl.cc/a330k8"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://personal-finance-egy.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://trzer-suite-info.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.pt/games/79402242188809/Baddie-Tag?privateServerLinkCode=99382535900423182128231632453729"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebooklogin123.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://j-tomlinson.com/5abdcr/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.metamaskwallett.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://simple-home-591117.framer.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfinvoice.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://comcasstweb.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfintiylogin.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://steamcommumminty.cam/tradeoffer/new/partner=Jp193Mk850Tc2746tokenQsNP635vR7280"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.instagram-login-ig.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.15370.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://generous-acknowledgment-515790.framer.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rss.sayler.at/go/y2c4w274/3374?label=graph_61"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ledger-wallets-auth-edges.vercel.app/ledger%20form/verify.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagramsupportsegurity.github.io/Instagram"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.rroblox.wf/users/1179291790/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.g14w.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://comcastinc.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://erfan82erfan.github.io/instagram_login/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rapid-oak-629.injaltransferwillgonabaid.workers.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://awsforensicl3ns-west1apprunner-dprd03feve9j.edgeone.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagramlikescheap.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.instagramlikescheap.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.roblox.com.ml/users/468343957093/profile/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.wh-apghm.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ledger-live-connect-desktop.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://to.lk/bJFori"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.ml/users/383212427167/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://zoltar-frenko-d5b740-ggrht-bn2406pke.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://misilabario.cl/dhl/dhl/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://ycgfn88lkwg-vnzktplx-4a5d9e-ycg17w.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sock-zizifn-kr.ludeaphd.workers.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fathimaminhazain.github.io/clone-landingPage/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ledger-securedevice.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ggforshi-cmyk.github.io/roblox-game/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rblx-r0bux540xyz.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.gr/games/14153443454/Meet-a-neko?privateServerLinkCode=76143850591978814844014072723342"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.imtoken-biz.org.cn/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://faq-trzzer-suite.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://mobile-xfinity.vercel.app/login"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://mobile-xfinity.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://sp13ct-frandel-biz-zormek-lavsel.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://am.sohll.lol/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://middleeastfragrances.site.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://middleeastfragrances.online.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://middleeastfragrances.website.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://middleeastfragrances.store.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://laaroma.online.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://laaroma.store.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://middleeastfragrances.cyou.middleeastfragrances.shop/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfonlineserver.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://g5.lu/auaaw"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sp13ct-frasel-biz-zormor-lavdik.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://metamaskwallett.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://logincomcastt.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://web-fun-checkout-prototype-uniswap.vercel.app/explore/tokens/ethereum"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://vip2.jiaozuo31.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://creditos-pichincha-miles--pichincmiles.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://creditos-pichicha--rondonpokemon0.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://pichincha--credit004.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.gr/users/622177948453/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://webdomain03.dnscpanel.com/~aguiasda/it/inbank/auth/login.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://webdomain03.dnscpanel.com/~aguiasda/it/inbank/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://steamcommumminty.cam/tradeoffer/new/partner=64318432token=r0igerPI34832"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://docusign.kecifang.net/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://3aurbanismo.com.br/wp-content/Sys/ch/card.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://wwwmaxpointsprogram.us.cc/4g/home.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://php-web-server-3--jmhernandez2990.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://bhdservisscuentresolu.yzz.me/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://phost.com.br.cssi.com.br/CB/DZ/CB/espace-client/user.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://phost.com.br.cssi.com.br/CB/DZ/CB/espace-client/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.71678.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://fakebooklogin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://staging.dfhwvp9zy8m7p.amplifyapp.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://security-server-page--45678ghj.replit.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://rf3x4x34x.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagramfollowers7894.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.instagramfollowers7894.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://34cr34cr3c-8ap.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://roblox.com.bi/users/948999725954/profile"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://bafkreidia54cvtcl6pqordwdjcjmkrfmco3kvfyzedmycxhdt7tk3fexau.ipfs.dweb.link/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://an2210sh.github.io/NETFLIX-CLONE/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://id.auth-share.su/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://rajansingh018.github.io/netflix-clone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://axpgames.github.io/robloxlogin/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://gamebonusak-bot.github.io/Google/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://7ashwani7.github.io/Spotify-Clone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.loginaccountfacebook.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.infoxfinity.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://appleid.auth-share.su/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://908779.com/admin"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://kantox-preprod.com/fr/secure/login"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://qomculture.ir/light/post/index.php?email=alynz@ab48e036e00279db6f905229e9f694349666.com"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://itsmeasifikbal.github.io/Ledger"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://zowie2l.github.io/Ledger"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://codingwithdhruv15.github.io/Expense-tracker"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://lscai-dev.github.io/PL-LEDGER"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.facebook.affixlink.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://polizcardactiv.bond/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://cancelacardiffseguro360.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.gr/games/133624249066123/High-School-Life-RP?privateServerLinkCode=26676135374151735703107772519650&game_id=133624249066123&game_name=High-School-Life-RP"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/games/93002451912476/Caught-Lackin-Duels-In-Development?privateServerLinkCode=62163753765523904476096247126035&game_id=93002451912476&game_name=Caught-Lackin-Duels-In-Development"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/games/104715542330896/BlockSpin?privateServerLinkCode=62163753765523904476096247126035&game_id=104715542330896&game_name=BlockSpin"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bi/games/85896571713843/COMP-Bubble-Gum-Simulator-INFINITY?privateServerLinkCode=90736236509261092576081988506405"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://g5.lu/fhcmb"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.gr/games/103037106396302/TROLL-Hug-Tower?privateServerLinkCode=26676135374151735703107772519650&game_id=103037106396302&game_name=TROLL-Hug-Tower"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://menuue-aktivasipays.greata.beauty/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://willesaxz.pages.dev/public"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.wesmongtx.4663.org/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://c0nectt.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.35518236365.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://xfiniity-update.weeblysite.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://dnxa-x.iddev.biz.id/vuxe/x4/login.php"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://csplaygems.com/2r17w9bw"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://sp13ct-lormel-biz-pradik-zavkor.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagramaaps-code.github.io/insta-6/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://r911.site/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://robux911.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://goo.su/NnQB"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://prufungkontozu.click/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://worker-curly-sun-aghamohammadhossein.mhkh831221.workers.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://amycanterbury.com/PROPERTY"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://f005.backblazeb2.com/file/ijfjefgei/SignintoXfinity.html"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.tweakzen.com/app/delta-executor/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagram-login-ig.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ycgfn00lkwg-vnzktplx-4a7d0e-ycg66w.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://gentle-paprenjak-7fc631.netlify.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.roblox.com.bn/games/14153443454/Meet-a-neko?privateServerLinkCode=05478284708093709924530844404081"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://zdkpt80gpx-wjsng28kxz-3e2f5b-wjq91k.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://shopee769.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.shopee769.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://cn.mpmxzu.com/home/register?code=20188"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.ww38.hostmaster.m.facobok.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://vicho2014pro29328-sudo.github.io/Datos-billi-butcher-bot-rbx"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.17548.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://accesoihabilitado.iceiy.com/?i=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.acur.me/l/ZkLgp"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://comcastt1eyr.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://micr0sft.github.io/com.mx"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.15375.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://x39p.top/m/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://whatsapp.traviyo.in/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebook.affixlink.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://telvora-nqx-zentora-a5x6hk34.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagram002.github.io/Instagrem"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://netflix-clone-opal-iota.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.paypal-signin.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.facbookloging.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://sarthak83006.github.io/Netflix-frontpage/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://ui-clone-faraz.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://goo.su/aNlArMJ"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://netflix-ui-clone-two.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://damnchangeventq8.shop.page.midasbuy-zone.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://suryanshsharma31.github.io/Amazon-Clone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://nayansharma8123-gif.github.io/AmazonClone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://posttelecommail.github.io/post.github.io/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://kaleabsintayehu489-dotcom.github.io/Netflix-clone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://instagramfollowersfake.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://nayansharma8123-gif.github.io/Netflix-Clone/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebook-2-0-dun.vercel.app/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://faceboomlogin.blogspot.com/?m=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://giftcodelqvnlq.aovlienquan-garena.com/2554f36e14492ddbabcef9d0a46ec792FB"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://whatsapp.audios-whatapp.hl.cn/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://page--trezrr-io-logg.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://facebook-fansdanssapage.blogspot.com/?m=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.facebook-fansdanssapage.blogspot.com/?m=1"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://uj2-tocl-wyls-ykjh-9pon-os0dhc.pages.dev/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://1336ooo4.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://xfinity-connect-newupdate.weebly.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://www.cybersecuritynews.com/new-wi-fi-authentication-bypass-flaw/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://whatsapp.nurgulotomotiv.com.tr/login"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"http://whatsapp.nurgulotomotiv.com.tr/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://71693.xyz/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"url","first_seen":"2026-08-10T00:00:00Z","last_seen":"2026-08-10T23:59:59Z","sightings":1,"confidence":"Low","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"phishing; provenance=feed","url":{"full":"https://www.loginmyfacebook.blogspot.com/"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:feed","phishing"],"labels":{"score":34,"family":"phishing"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","ip":"104.64.221.161"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"api.ipify.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"discord.com"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"golang.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"inet-ip.info"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"ip.seeip.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"ipgrab.io"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"ipinfo.io"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-09T00:00:00Z","last_seen":"2026-08-09T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"local.onion"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":64,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","ip":"165.22.69.214"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","ip":"185.158.107.249"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"ashburn.va.us.undernet.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"bucharest.ro.eu.undernet.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"budapest.hu.eu.undernet.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"chicago.il.us.undernet.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"ix1.undernet.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-08T00:00:00Z","last_seen":"2026-08-08T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"ix2.undernet.org"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":62,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"ipv4-addr","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","ip":"2.26.136.128"},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":60,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"upx.sf.net"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":60,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"z.io"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":60,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"2y.cf"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":60,"family":"discovered_c2"}}
{"@timestamp":"2026-08-11T00:01:08.031Z","event":{"kind":"enrichment","category":["threat"],"type":["indicator"],"dataset":"ti_darkwick.indicators"},"threat":{"indicator":{"type":"domain-name","first_seen":"2026-08-07T00:00:00Z","last_seen":"2026-08-07T23:59:59Z","sightings":1,"confidence":"Medium","marking":{"tlp":"GREEN"},"provider":"DarkWick","reference":"https://darkwick.netlify.app/","description":"c2-infrastructure; provenance=inferred","url":{"domain":"n.to"}},"feed":{"name":"DarkWick","reference":"https://darkwick.netlify.app/enrichment"}},"tags":["darkwick","provenance:inferred","discovered_c2","from_sample"],"labels":{"score":60,"family":"discovered_c2"}}