{"type":"bundle","id":"bundle--f0bcfde1-a572-5714-906e-e9f4fa7bd609","objects":[{"type":"identity","spec_version":"2.1","id":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","created":"2026-07-01T00:00:00Z","modified":"2026-08-11T00:01:07Z","name":"DarkWick Sensor Network","identity_class":"system","description":"Self-operated honeypot sensor network. provenance_class label: 'observed' = witnessed first-hand by a DarkWick sensor; 'inferred' = derived from witnessed evidence (e.g. C2 extracted from a captured sample); 'feed' = aggregated from the named open source feed (secondhand)."},{"type":"indicator","spec_version":"2.1","id":"indicator--2ebc12dc-f42d-5cae-9f31-79a13850a1c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.25","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.25']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--080a490e-5657-5ca2-9671-27bb879d98b0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 80.67.167.81","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '80.67.167.81']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5966345f-fffb-574b-bb4b-ffe515edf10c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.98.51.189","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.98.51.189']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c8e4770-282b-5e3b-8aee-cc6573ac834d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 89.58.26.216","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '89.58.26.216']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e175a440-e5fc-5b8f-bbfb-e7d0e5d094c1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.4","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c125c66-6157-5303-8ccd-24f888a6560f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.45.102.93","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.45.102.93']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--427bdae7-d1dd-510f-8d5f-9a0178c8d9e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.99","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.99']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c8fff6-d0e2-5add-97cc-f759f34ad5d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.44","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.44']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b198d5d-0ebc-5908-adff-9e8384780e64","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 87.118.116.103","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '87.118.116.103']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe74a2f-f80f-587c-ba0b-ceda7fd6ea1e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.12","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6bdb231-ee75-572c-a1c0-9e7b2d9e2d4f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 89.58.41.156","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '89.58.41.156']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a0dd6ea-476c-52d5-8cd8-bd31bdab7455","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.1","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50185339-ddd1-5f97-9ef7-1bafc8e7d3ce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 179.43.182.232","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '179.43.182.232']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e849707e-0a29-5e04-b7e0-984bd7ac5d21","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.2","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3053f4b0-be42-5f61-8b44-990c86676dea","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 37.187.5.192","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '37.187.5.192']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e500dde-e325-53f4-96f1-3b8f99979b2f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.8","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.8']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0512767e-9811-5ed8-b655-6223dede47d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 195.176.3.23","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '195.176.3.23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1292ddac-3286-583a-ac3d-d771cb3b7ee6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.6","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80d185e-9158-54e9-91a0-df3f923e9989","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.42","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa227f4b-6b0d-531f-ac72-992b7494dc90","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.92","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f153707a-1166-5939-9f3e-c0b860076d35","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.11","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.11']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f52f1bf3-415e-54eb-b964-2c7b565e681e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.7","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03c7254-af74-5cef-9fa4-6ef96fa54085","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.50","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b10ccedf-1187-57d5-99a3-11157b639521","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.9","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.9']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54f2a77a-1023-53b8-9b6a-95c03e9d3224","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.43","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.43']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b49a541-8ecc-5e08-89ed-87dd5b96e3cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.95","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.95']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1706940a-0e25-52a9-b42b-d38784f09684","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.94","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.94']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4888dda-2871-5a19-b78d-bb87e06738ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 190.120.229.98","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '190.120.229.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--698e3a6c-30c7-55f5-8de0-149dd9608704","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.46","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00534e59-89b6-5e68-a791-129ae5f01cca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.15","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.15']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa6b323-b10c-58a9-8caf-4b6252f32d77","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 87.118.122.51","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '87.118.122.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b34a4fa7-c240-5675-a8bb-605f17fa080e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.93","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.93']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24f54670-4194-59d1-a983-458a7c982a87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.79","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.79']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c80a16d-4671-550f-97e5-aa8fb46982dd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.48","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--580e027a-5464-5dfa-9780-02689a4ad044","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 195.176.3.24","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '195.176.3.24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d91d2c8-369d-5d5d-b0eb-61e7c7018715","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.51","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--876c477e-1cf7-522c-9772-7a930477e0fa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.12","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e9143c-9793-5d69-9987-ed19dc7459bb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 194.15.112.133","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '194.15.112.133']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86c38ecd-6c10-55ec-88d9-d747e175b898","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.49","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d48c37f-81bc-5a5d-8dcd-2af80b259846","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.102","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb04fac6-12b2-52ad-9fef-577c86d5cd8e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.13","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.13']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34e4b212-7e92-5140-bbc5-edf99e8a4e5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.208.75.4","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.208.75.4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fcb9e64-3fbf-53aa-bcb7-15b24f635f8a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 162.251.5.152","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '162.251.5.152']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4807bd8c-a093-54ea-ac1f-2f492b653f80","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.47","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.47']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fa3ed9b-b839-5c1b-bd56-9199b992f876","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.5","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.5']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbd22dc7-7817-5a64-826a-0320ec6690c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.45","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a50cf8c-52c2-5bb9-8304-79ae30ba9436","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.13","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.13']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16b2d09-5fc4-53fa-b9e0-8298d7d37cf5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 66.146.193.33","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '66.146.193.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b61ce281-9f15-51db-8b79-91a2a43880af","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 139.99.172.11","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '139.99.172.11']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f7e79d-ddcb-5341-9abb-64a36f8ff8b3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 80.241.60.207","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '80.241.60.207']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaee7a23-2706-5de8-b608-14b7d593e790","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.97","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09e12e70-6cf3-5f0e-b771-8e2f6875e8b3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.3","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--734d19d6-1a85-5d7b-b5dc-202a5728cfa6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.98","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d26fb3c-01fe-5620-bd8c-eedf86f5492b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 190.211.254.97","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '190.211.254.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0dcaf0-00a8-57f3-b86c-fa911b47daae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.132.144.59","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.132.144.59']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0e7622d-5811-5253-aae2-edcc56e635f9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.183.157.214","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.183.157.214']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c462a5a-17bc-5eb2-8a9a-0690d877cb0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.100","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--331a491c-52b0-5580-a007-9061628cf545","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 212.73.134.204","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '212.73.134.204']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e42ccab8-ba26-5435-be2e-283e694c41a8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 188.68.49.235","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '188.68.49.235']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--602d0dad-5045-5870-9005-f97b261b4781","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 199.195.253.180","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '199.195.253.180']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dcd576b-b416-5206-a3f6-66ef8a6292b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.234","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.234']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d801602-3062-5a4f-8b20-be87955fd50c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.101","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--947e54f7-e5b6-5f2f-bff3-d6f5c820f5b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 199.195.251.119","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '199.195.251.119']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63628c3e-ddc2-5894-b8cb-20aa3cc83d4e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.181.61.203","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.181.61.203']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f44fe7d9-7561-59a6-bfdc-5f34e43054a8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 138.59.18.110","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '138.59.18.110']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d64cfe-6a5c-528b-8bac-6af5b87bebd5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.246.188.73","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.246.188.73']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a787abf-8339-59ad-b7bc-ebd3703dd4aa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 188.68.41.191","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '188.68.41.191']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4441fa9-cbf9-5a17-aece-b340a3e5873d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.52","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.52']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c51912-b26d-5d9a-afda-92a2d5455b6f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 179.43.182.58","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '179.43.182.58']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76f3adc3-8b63-5fd5-841e-6af7e652666e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.207.107.216","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.207.107.216']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64b84985-f9a4-5b2e-9cd3-a3ad447ca36e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.244.192.184","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.244.192.184']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b1e358-badd-5d5d-9dbf-87e3c7170d3c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 195.88.74.206","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '195.88.74.206']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad96696-72c8-5157-ad51-149e20cf7c86","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.70.100.10","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.70.100.10']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--953a710f-c866-58e3-b7dd-cd75cd38c0c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 94.230.208.147","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '94.230.208.147']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a17c7b47-6977-52b3-9094-129529f7097e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 77.81.247.72","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '77.81.247.72']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e727ef41-df6e-59b5-9ce5-693ec39f8f8c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 217.12.221.131","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '217.12.221.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d50f60f5-d570-5ad9-9824-7d70756a8413","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 94.230.208.148","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '94.230.208.148']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa34e95b-bb67-583d-b6c9-8e794ffe7d67","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 95.128.43.164","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '95.128.43.164']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca29341c-c1c1-5c68-987b-f4506bb03935","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.20","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c03c8b-0ae2-55c6-9432-8b5c902e1813","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 102.130.113.9","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '102.130.113.9']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9efab31-25fc-5f89-b855-c751a09d0640","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.227.134.106","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.227.134.106']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59efb18e-48ca-5cdc-9958-09fa150bdd98","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 71.19.144.106","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '71.19.144.106']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79672136-2abb-51c6-a51f-e0b167d3cdb5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.208.75.178","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.208.75.178']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ad39357-5bfd-540e-be34-fc679586bb28","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.246.188.74","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.246.188.74']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cbf6185-74bd-5ffe-96bb-5254db87ada2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 209.141.55.26","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '209.141.55.26']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e580f8b4-42a8-535e-ae94-d5cdbf8dd72d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.45.104.176","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.45.104.176']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9354a010-351f-5ca4-8ef7-921e545cab0d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.42.116.96","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.42.116.96']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec9f5b38-bf7a-5e08-8cd6-bf5646e01608","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.208.75.153","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.208.75.153']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18142420-3c3d-53a1-9b5c-1bcd003506f8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 188.68.52.231","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '188.68.52.231']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c5d3c17-3e3b-5579-8251-a9f6a8c4015e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 87.118.116.90","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '87.118.116.90']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abea8c94-6192-515a-8484-d56e8b916b65","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.129.62.62","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.129.62.62']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00fd9f14-5229-5f38-a986-9c2024f22385","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.207.107.130","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.207.107.130']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de8fa486-8783-5074-8dd8-3eaa69ce28e9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 87.118.122.30","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '87.118.122.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40c4378d-1df6-56d0-a2d0-ae7ce8550a84","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 81.16.33.42","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '81.16.33.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2011a059-4069-57d2-ba9f-71646e234ef3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 173.255.198.243","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '173.255.198.243']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b5e959d-9596-5e72-af64-02d70f5f5050","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 216.73.159.101","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '216.73.159.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f1f204-4f36-5e9d-adc4-050754192949","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 194.15.115.212","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '194.15.115.212']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f181a513-85dc-59c4-b534-b350fe91cf9a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 160.119.249.240","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '160.119.249.240']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5b352c9-6af7-5b48-934f-f5fe2373f363","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.244.192.175","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.244.192.175']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--227334e7-1206-5008-bcaf-753cab3cbf3f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.80","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae24c04-4a98-55db-b60a-f7cd7267521b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.34.33.2","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.34.33.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--192a8ed5-8c7c-55e8-b89f-c51edd5adfc4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 103.109.101.105","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '103.109.101.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a9fe0b-4e5b-5f44-b36d-6001fb2fae89","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 46.232.251.191","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '46.232.251.191']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec7ed5e9-6923-5905-810e-73562ba1cad8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.85.191.8","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.85.191.8']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfa9c647-f31e-5cd8-8270-75d5d15988c7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.56.171.94","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.56.171.94']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aeea789-6df8-5fac-b437-4dc475287093","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.208.75.239","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.208.75.239']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91482ce8-1d4f-5638-aeeb-979380ffc429","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.105.134.150","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.105.134.150']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--873cd02f-cd04-5491-963e-c89c20404e20","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.85.191.7","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.85.191.7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d402499-3b9f-59f3-bdf0-32addf287bbc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.208.75.156","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.208.75.156']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ed064b5-07c9-50e1-82b1-828a3b7c5f0c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 205.185.116.34","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '205.185.116.34']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c50c7b80-9b6e-552b-baac-00549fa6885e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.154.110.142","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.154.110.142']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9212e9c7-4402-5ca7-9c51-6acd91d80a8c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.206.26.26","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.206.26.26']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c02c24f-7c0a-5ee3-8322-4e51a795d1e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 162.216.18.62","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '162.216.18.62']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9801f231-f0d1-5765-b8ff-85197aef85e8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.45.98.162","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.45.98.162']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cfdcedc-9c8d-5fdb-9491-e588aa8552ac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.82.219.109","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.82.219.109']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--632a5618-987f-5a92-aef7-95ed764f850f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.130.47.58","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.130.47.58']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65b2f174-5994-5203-b4eb-09fe9d8ec4e8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 109.169.33.163","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '109.169.33.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3928d1ba-fa62-5883-918c-086593ae3526","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.2.67.226","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.2.67.226']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bed3ec7e-133d-54b9-92f7-79fcb73b2970","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 83.97.20.77","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '83.97.20.77']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8fac270-02ce-5d19-a15b-53746d022a5e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.58.107.53","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.58.107.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d43048e0-e853-52a3-b660-0e8933e1e71f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 205.185.123.93","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '205.185.123.93']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5fdac9-7a05-5430-92da-9c5d357bcfa1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 205.185.121.170","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '205.185.121.170']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec21d799-6329-584b-bf8b-d6fef7a85a04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.66.35.21","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.66.35.21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea319879-3284-5dcb-862c-269d65058140","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.66.35.20","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.66.35.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8d51f2f-d4ac-50f6-9f18-63808e834c11","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.96.155.3","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.96.155.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88328570-7348-5ac1-a3b7-7f048f1bac81","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.129.62.63","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.129.62.63']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07c282c8-c41c-5ef0-bef4-b30d424fba02","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 205.185.124.176","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '205.185.124.176']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63de460e-23a0-57f5-9017-159f518aea6c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.255.117.56","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.255.117.56']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28aa41b4-dc53-5c24-a19b-5c837dfa5d57","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 179.43.159.78","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '179.43.159.78']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f030062-e5c5-5b5f-95e0-f95f9a6bb26b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 81.17.28.95","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '81.17.28.95']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df1a4a4a-b3bd-5dcd-8335-344027f41850","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 89.147.110.118","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '89.147.110.118']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f930b3c7-5f1c-5fb5-a50a-a3e3d811dc65","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 104.192.3.74","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '104.192.3.74']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e79ff3cc-5df7-5005-895f-76e2239a2c39","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.92.109.43","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.92.109.43']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22886f66-ea2e-52e6-8667-abf8c83f9439","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.137.14.106","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.137.14.106']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d3a45e0-f7b4-59bf-8efd-2a43b32464d5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.137.14.104","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.137.14.104']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58f69fb9-3175-5457-a0b2-2e3503866551","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.137.14.105","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.137.14.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dc74c56-d4ed-5413-a6e2-5299662de15a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.137.14.92","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.137.14.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f73aab31-af7e-557a-935e-6e392803f2a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.44","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.44']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed7d1890-c82f-5ea7-9559-7b5f6cf12ac7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.49","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f44e5ed-903d-5cca-976f-20e7c1e539e5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.63","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.63']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a459e86-8abb-53a0-a0d2-125fc2b8f554","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.55","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.55']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fbe1965-9261-52a5-bd2d-4a27f232e7c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.46","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa60d5de-337e-5096-ad89-4e282f368552","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.43","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.43']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be93760-e260-51b3-acd4-5cb0f0034f1a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.51","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e516b460-13dd-5061-9394-3fc5eb0580fe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.52","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.52']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ff11f7a-992a-581e-889b-dd868ee5b12b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.53","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--803a1c33-3753-574f-b8a1-0f526a815086","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.61","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c584af26-1f07-5123-bbea-15f2a93508b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.57","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.57']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e674cb8-7b3f-5dbe-ac90-81fcb11b4b87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.47","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.47']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d24f04c3-21c7-52ba-912c-eca35564de86","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.56","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.56']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac717edc-12a0-57e8-b5d4-31e8129d640a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.48","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--635350d9-bdc8-55fc-bfc0-5c47adb8edd9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.60","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.60']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8b851e3-d02d-5df1-92eb-435e61faffb6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.62","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.62']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c5bacf4-08b1-5e62-8b5f-a7f4d5c71923","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.45","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee4687b6-d130-5696-af91-3ceab03a0e87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.54","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.54']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--560377e6-a2c8-541c-b57d-a8e418cee95b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.58","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.58']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a59a79ae-0bf2-541d-9768-828802df0305","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.220.101.59","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.220.101.59']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5565ceba-2353-5bf7-b68a-b68afb434c35","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.246.128.161","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.246.128.161']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--934e768f-096c-57a5-8473-79d336dd10d6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.219.236.101","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.219.236.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2462de0c-c39c-555c-b383-1a81fcbf7ff7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 209.141.32.198","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '209.141.32.198']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d81a7237-70c8-5c67-b71b-0c8696a61643","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 130.193.15.186","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '130.193.15.186']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c249aaf1-7520-52ae-ac35-fe51b55d6647","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.78","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.78']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c32d06a-ba7c-5425-8c11-37867b447260","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.246.188.149","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.246.188.149']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1c99047-b104-568a-b8e6-76ff0ac5d37c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.12.3.80","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.12.3.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--439263f9-8701-50a3-852e-d87fcceef146","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 123.253.35.32","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '123.253.35.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bfb2d74-1e63-5b01-b65f-19e513374a81","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.246.84.179","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.246.84.179']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cda027d-b6cb-5cea-bf75-df21b17c6c69","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 66.220.242.222","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '66.220.242.222']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b67b885-5ee6-58d9-93c0-a9e28f62782f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.191.204.254","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.191.204.254']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c079295-8e23-539d-bddc-daf2222c8f43","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 107.189.13.180","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '107.189.13.180']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77768a3f-9e6a-50f5-8599-7cac0259e111","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 102.130.117.167","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '102.130.117.167']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09f01935-7b1f-5461-8410-61f46bb6d57b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.255.104.202","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.255.104.202']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0be83bc-b490-5d96-9f97-f842aa03fdbd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 178.218.144.18","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '178.218.144.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--373481c4-ada2-5ead-88f4-6e6b18e78b40","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 85.93.218.204","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '85.93.218.204']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--653d6c20-1a48-5044-98bf-835466f527eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 195.80.151.242","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '195.80.151.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52aa378c-2bd1-5d63-b8ad-0626ba3dc0c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 89.147.108.90","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '89.147.108.90']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--556b9380-2d01-5790-9a17-a6dda7a675d2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 62.182.84.146","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '62.182.84.146']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--264a474f-a007-5e3c-8526-bb225b52d157","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.66.35.22","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.66.35.22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb34c951-3ca2-5495-9bd1-0db182d7d52a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 199.195.253.124","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '199.195.253.124']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ed07d93-4bfd-5810-b067-bb47f9330862","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.8.156.142","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.8.156.142']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd1dbb1-c877-5b6b-a7dd-fb0c5d2e4305","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.112.146.167","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.112.146.167']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4df19f78-8786-5adf-b270-989461ba1f7c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.42.170.203","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.42.170.203']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c090e9-0eb5-58cf-9e6c-61b91dae4c9f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.92.109.126","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.92.109.126']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9aeebba5-74a5-5ea2-8e73-035d7f80ce79","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 172.234.228.174","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '172.234.228.174']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--883eaaa0-cd6e-5a9f-a333-f9331c457112","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 94.142.241.194","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '94.142.241.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa7757c9-874a-5ddd-899d-4edc3f063c66","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 94.142.244.16","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '94.142.244.16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3a12be-90ae-56ba-bde9-b2c3208505c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.106.102.102","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.106.102.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1b0a534-53bf-50db-ac3f-4ebe33776823","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 93.99.104.194","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '93.99.104.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46637262-7dd3-5b28-8d47-a14455bc34ac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 212.69.167.80","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '212.69.167.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29f16bde-d82c-50d3-a802-6c81765aa39e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 165.73.242.163","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '165.73.242.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb18b228-1cfc-5b21-add9-a6456ec870f5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.243.218.226","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.243.218.226']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e32f64-0987-5181-bf84-4cc5b7350520","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.104.86.6","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.104.86.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b345e9-d71a-5e2a-afd4-b2b7ef14ad20","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 114.35.245.150","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '114.35.245.150']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31d6371-b896-551e-a03e-c3ed3a56abbc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 107.189.29.184","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '107.189.29.184']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e05dd64-b3d8-522f-bbc1-1727865a1a81","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.243.218.229","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.243.218.229']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a655b70-77f8-5b92-a613-11cd08ec0f3c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.243.218.230","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.243.218.230']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70253fb1-1fb5-5eaa-af41-aadde968faa5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 103.164.54.199","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '103.164.54.199']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--534a389b-bd30-5242-8874-3db849bf7482","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.235","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.235']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b8facf-e306-565e-aa9b-5cf1a1633a62","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.128.133.242","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.128.133.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f180db02-498b-58de-877f-9f9f1650871b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.208.75.3","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.208.75.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ca47e3-eba5-5b52-9e1a-0cca16c4cf58","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 209.141.51.180","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '209.141.51.180']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26af452a-8aa0-56dc-b17a-a0fdea112ec9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.243.218.225","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.243.218.225']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ce28318-04f3-50ed-8608-e2ae4c643f85","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.76","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.76']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8363c4cd-adb8-56dc-9148-cf7d725e36ed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.198","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.198']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e3227ff-a1b3-56e4-a613-3e0da57845cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.182","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.182']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f7802a1-fab8-5598-ba15-c4de348fb0e6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 212.38.189.186","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '212.38.189.186']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c04c1638-5115-5fde-a95f-ec7fc95e38e4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 87.118.116.12","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '87.118.116.12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac33af7-8edd-507c-93f3-8ed8e37a066c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.100.85.132","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.100.85.132']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aa03d41-5f94-57f7-8a52-b9c74bfe7c97","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 88.80.26.2","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '88.80.26.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--579f5bcd-3ae1-5afe-9998-b391239bba33","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 88.80.26.4","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '88.80.26.4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06ee090f-3a20-578d-a183-ba872ef53d56","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 192.76.153.253","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '192.76.153.253']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0bed759-10e8-5996-9896-ed025d68ed7f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 200.122.181.2","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '200.122.181.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--175159a7-ee6c-5293-9f2a-66b38b20a2c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 35.0.127.52","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '35.0.127.52']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5898a872-6290-58c2-9412-564f07288e43","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 89.147.111.87","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '89.147.111.87']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5cf11c9-a3f2-57b9-9119-c1e1f002e98c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.255.118.218","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.255.118.218']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e34138e-dc7f-5fa6-9385-b4fadcda52ca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 188.239.191.25","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '188.239.191.25']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c74b8e4-1224-5308-a0a2-58a28f2114dd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.36.132.21","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.36.132.21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d01f1d78-040a-5a31-b655-cc0d8611affc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.165.171.84","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.165.171.84']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--846c2eee-796b-584f-9832-2ab038a21125","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 80.94.92.92","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '80.94.92.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a050cf1c-4315-55fe-94eb-51f33a88defd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 91.203.144.194","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '91.203.144.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--610b9c80-f011-5881-a809-9a6cc2561af7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.255.125.196","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.255.125.196']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03ad8cd1-d8f6-5ca1-9cfd-f3fd6dfc10d6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 108.61.189.136","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '108.61.189.136']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82358c2f-d4ac-595b-8381-e896a22da19b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 139.99.8.57","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '139.99.8.57']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5922ac36-7f66-5da5-989b-5feeb92ec88e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 172.104.182.84","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '172.104.182.84']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--700b0214-e9ee-56c0-bf78-829d209f4428","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 136.244.111.163","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '136.244.111.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72456abe-e11b-5cc6-8283-c1f0ad53d2f2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 93.99.104.40","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '93.99.104.40']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a510e37e-958a-52dd-8378-49a5a477a669","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 190.103.179.98","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '190.103.179.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4ca01da-a14a-5db3-8165-55a6f01d2b41","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.200.229.243","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.200.229.243']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ce62a9-bfdb-53f4-b608-b4e582852314","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.66.35.35","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.66.35.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--516a608e-5add-531b-be4a-34c51f35ab02","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.235.146.29","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.235.146.29']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--052506f3-10b4-5571-964b-111bfca7c2de","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 88.80.26.3","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '88.80.26.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca238a32-bb65-5e0d-a261-372e1697f14a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 146.59.231.4","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '146.59.231.4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f339e0db-b8c8-5906-b40a-96222d7d35dd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 178.218.144.96","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '178.218.144.96']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a056c58e-7866-5036-9bb3-805ff8bf4808","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.101","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a62aaef-856f-5c14-8927-9e99c8e6db99","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 93.99.104.18","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '93.99.104.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4aa00665-fc03-5dd4-aeff-a290541184ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.98.57.74","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.98.57.74']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c420a7ba-9624-5798-8cd4-9e3d8af37311","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 93.95.231.14","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '93.95.231.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--021350a1-5913-5c26-9931-416c6e53f304","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.98.62.158","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.98.62.158']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc5b18da-8fd7-5859-82e6-c92e9aea50c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.222","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.222']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b68b78af-1029-5fd0-8185-07f77a2bd34f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.55","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.55']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fee7d86e-8006-507b-9dd4-e59c76e2aff8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.74","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.74']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32b7ea2e-d506-5ddd-9f97-0794e1e43b97","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.172","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.172']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a640194-0792-508c-ad04-05758b0688c7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.47","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.47']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e921b89-0e9d-516c-9c79-321a862efe2e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.33","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67121223-e5b4-5c3d-a866-32ea8925e9e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.98.57.151","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.98.57.151']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ad15ef0-2287-5a72-9de0-01e117c25ac1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 205.185.113.8","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '205.185.113.8']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba1e8a56-7b31-59a6-a756-6d3c0515aaff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 209.141.45.141","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '209.141.45.141']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5f97a3a-7c9a-5784-96bc-6958afd0fc5b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 83.217.9.73","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '83.217.9.73']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a28d726-5b9d-5925-8fad-43e1d671442f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.150.28.13","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.150.28.13']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81e080d5-0a77-5d26-8266-f865726794e4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.181.60.204","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.181.60.204']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9300e211-5f12-565d-8765-ab08593a8e8b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.17","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdbd91b1-373b-54b0-bc90-e2be48ed0923","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.97","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbce38da-f6ec-5a85-9263-d5fa0413d914","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.128","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.128']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49d7ea83-bba4-5317-9ffe-fd0b24436dce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 37.221.208.71","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '37.221.208.71']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d68080-14f4-52af-bed6-256d2cf6eb6f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 93.95.227.37","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '93.95.227.37']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb4be18b-2cdb-5f44-b538-1c6593ab51fc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.254.196.141","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.254.196.141']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--542d32dd-b255-5cb4-a357-c186149c9a76","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 172.104.186.73","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '172.104.186.73']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f7a9de-4e1f-5d01-a511-71a6d2e45b10","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 107.189.3.11","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '107.189.3.11']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2df385ce-5b8a-5f6b-89c9-35e11cad6076","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 103.146.203.11","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '103.146.203.11']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78684232-4151-5dee-9d8a-8d98cc7866fa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 166.70.207.2","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '166.70.207.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3a5dcdf-1009-5826-93c7-8a67895e12d0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 198.46.166.157","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '198.46.166.157']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75bf966d-1f30-562d-bbbd-fba00342c73f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 172.105.20.12","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '172.105.20.12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd41bf1-031d-5503-8348-dc3e4f57f166","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.54","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.54']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--991e82df-906a-5aff-97b9-27139446ff04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.95.169.104","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.95.169.104']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b817a3-1049-5849-a5a2-d25d897e96f8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 84.19.182.20","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '84.19.182.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b7e8667-54db-57b3-84de-58eafcd294cc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 89.147.110.82","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '89.147.110.82']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--529ff347-4708-5262-b3c8-8830db3324a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 178.17.171.102","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '178.17.171.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30409021-47dd-5691-8a5b-d3f2fe4711da","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.195","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.195']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--364a8122-b8d7-5961-a595-0ad976aa63eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.200","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.200']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29ac9922-8d6c-5527-9d6b-dc18e93ad630","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.194","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edbabb60-b798-5397-b5fa-c629a42274e9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.197","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.197']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60f07aea-0c15-5b12-810c-7b4aad23a6ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.196","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.196']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d0ba37-a4b9-549b-837e-22125f294dcc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.199","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.199']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--643e6710-d108-5b6c-91d9-9e9ed342a7b6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 193.189.100.198","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '193.189.100.198']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dbacd98-5dc2-5edc-a78c-be0f417519b3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 92.246.84.133","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '92.246.84.133']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--101a2147-3cc8-5b70-8851-571657d90915","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 178.20.55.182","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '178.20.55.182']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7652f58-1b07-58fe-98b2-f966a23c9370","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 178.20.55.16","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '178.20.55.16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99b2c03f-0294-5fd8-80a3-aad099294f59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 205.185.113.180","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '205.185.113.180']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9bfcf5-fcbe-5fdf-bd15-4df320a887b5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.84.107.174","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.84.107.174']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffe6c993-2411-5130-b0d5-e3c91d221b94","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 194.15.113.118","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '194.15.113.118']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e4f0a8-eb6d-565e-949c-9de79c9699b8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 199.195.248.168","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '199.195.248.168']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--314bff7d-89d3-5ac8-880b-3980fc31a836","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 103.20.241.102","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '103.20.241.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6438a39a-1ded-5d32-9cbd-d3bd11fa1abc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 37.228.129.63","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '37.228.129.63']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04e889e1-213a-5ef0-a3d4-383ca00dc3b6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.133.74.53","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.133.74.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60ae91f-c2f7-5776-9559-9f27bc47f1d2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 62.72.47.105","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '62.72.47.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8220363b-f383-5e60-bdc5-26af8787a145","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 46.250.243.29","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '46.250.243.29']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ea28c7c-cc09-5500-add9-7d46793c0e25","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 185.67.82.114","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '185.67.82.114']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52d2a7ff-53f6-59df-989f-f2e5ad52279e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 171.25.193.131","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '171.25.193.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a18faa-a996-5c2b-9d7d-2dc9030ac545","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.91.250.107","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.91.250.107']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aba4caee-ee03-5acd-9b2b-5ceedc24a12d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 154.53.58.161","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '154.53.58.161']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--456d636f-7167-5c09-95f0-00e05f756055","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.148.10.111","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.148.10.111']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5734552-174b-567d-bf6f-c64f3687a145","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 204.194.29.4","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '204.194.29.4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c2d793a-c8eb-558a-ba0d-eec014a28027","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 5.104.84.183","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '5.104.84.183']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe28df67-2032-5627-a02a-e6d5edf5eb7b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 107.189.8.70","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '107.189.8.70']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef60043e-979b-57dc-874a-d90a44374fee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 45.9.168.192","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '45.9.168.192']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca6faef0-fcb9-583a-89a3-8db5697c3da2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 74.82.47.194","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '74.82.47.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e75b747-9a7f-57c1-becf-05954944ac2c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 194.163.136.187","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '194.163.136.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e74a284d-d583-532b-8429-2a1844c792bb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 179.43.128.16","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '179.43.128.16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f21903a-0df3-5fcb-973a-b2392834c680","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 94.72.104.135","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '94.72.104.135']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ede881f-50e1-5556-9088-25c8a3a446e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 77.48.28.204","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '77.48.28.204']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cfaff9c-1cd3-5592-980a-de82e365ba07","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"tor-exit: 77.48.28.237","description":"Aggregated from open source feeds. Score 79/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["anonymization"],"pattern":"[ipv4-addr:value = '77.48.28.237']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=feed","darkwick:category=tor-exit","darkwick:family=tor_exit","tor-exit"],"external_references":[{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82e6bece-65e4-5029-a590-144999b7ed02","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.220.146.226","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.220.146.226']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--873bec9e-7f0a-55c7-906b-a9d06887a9b5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.224.138.250","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.224.138.250']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90b0b160-f253-51ac-a42e-cb322be2bcac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 103.250.147.132","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.250.147.132']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56e68293-dd8c-521a-8065-f18ccd757bc8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 92.118.39.71","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.118.39.71']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b33b666-e9b4-5f77-b609-5221c6614201","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 2.57.122.209","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '2.57.122.209']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e56512cf-4130-53fb-85cc-d357179b40a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 77.90.185.66","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.90.185.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"},{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec933bf-5c78-573c-a7f2-daa1ec8f552f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 205.237.110.232","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 92/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '205.237.110.232']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"},{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ecd1bf-945e-5a09-8976-f17d4bf0afc6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.217.23.206","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.217.23.206']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0965556f-d440-54d7-90a8-d9cc25965746","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.245.140.132","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.245.140.132']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bece17a7-a5d1-5509-a685-476993843829","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 103.228.150.101","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.228.150.101']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2604d3d-1680-5173-a215-0acc04290da3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 146.190.164.28","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '146.190.164.28']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69047026-e68a-5071-8ab3-834328ec5e58","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.182.16.23","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.182.16.23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23c5cbf9-7b9b-56dc-8071-8e86fa0f49f8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 104.238.110.208","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '104.238.110.208']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3382e3-bdc9-564d-aab0-7a0d03983dab","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.42.168","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.42.168']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6977ac7a-0568-5b9b-a27f-ff2760197534","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 122.234.231.5","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '122.234.231.5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c451abd0-f7c3-57ac-8e1e-9ce9285dbc25","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.230.169.254","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.230.169.254']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f74528ba-4e1f-5043-83cc-45d782c1cdd0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.40.153","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.40.153']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eb052af-ab5e-5aee-8805-8eb41fce08f9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.154.30.251","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.154.30.251']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3854e4ed-a17f-5024-92e9-5d7dd0bfdf7b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 166.62.42.127","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '166.62.42.127']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b35bbca-d50f-5f6d-9cbc-dd533657b4cf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 80.94.92.179","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.94.92.179']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9db04615-8989-59c9-b33c-7a253bdd2f09","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 47.243.26.215","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '47.243.26.215']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4193088-609d-5fbf-b678-839050fe8b8c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 49.49.13.179","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '49.49.13.179']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aedadf8a-dd6d-5def-ae41-4fb71fef659b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 113.20.8.90","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '113.20.8.90']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c3aaa46-a81f-52e9-a9d9-f36f1a1ab587","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 79.175.133.33","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.175.133.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a5e008-d72b-59f2-9cde-c8828c537d6d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 24.36.189.207","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '24.36.189.207']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbd99a0c-6dbf-59c8-8205-f1b68b649621","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 80.5.84.6","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.5.84.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--205ad0ea-68f0-5e1b-a9ba-8c7149f1f4ee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 159.195.38.88","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '159.195.38.88']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6179a30a-ae5f-593b-a24c-1be41fae3e73","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 179.237.82.223","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.237.82.223']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e75708-b062-5370-a8f4-f4b913224434","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 15.204.173.173","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '15.204.173.173']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84591ba0-a8cb-532e-ab0f-afc926224461","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 24.15.74.210","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '24.15.74.210']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca13b51f-0c44-5549-8052-705dc474bfb2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 24.233.0.36","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '24.233.0.36']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2d1d729-c0ee-5395-8769-8f4a3decbf30","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 200.105.156.165","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.105.156.165']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c317ab17-9568-5103-b181-0c29e88decac","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 154.88.65.192","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '154.88.65.192']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03ea821-4d9d-5dda-90dc-d16096c8e268","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 118.38.44.223","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '118.38.44.223']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--614647f6-8a3c-5c3c-8b2e-ee9275b3d9f4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 59.120.178.166","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '59.120.178.166']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b78a38-4487-585d-b909-a74e58d66433","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.70.94.155","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.70.94.155']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b0f96f3-2315-58da-9c5c-0a4a5cd4b0a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 61.73.27.69","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '61.73.27.69']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f8d344-e719-5942-8b44-ea1fde989056","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 87.106.163.159","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '87.106.163.159']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--347acbe8-c9f8-54cf-8d29-78cb3fa8dab1","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 92.118.39.50","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.118.39.50']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf83a0d0-02f1-52e1-92a3-3f8819a3fbfd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 66.94.103.120","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.94.103.120']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--620f6e3b-50ea-5e4b-8eeb-65225245c732","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 221.141.48.177","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '221.141.48.177']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4e5e515-572f-5a90-a0a7-18e0d6511170","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 41.56.219.139","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '41.56.219.139']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0345b9b6-e75d-5f9f-824b-e0b0185e9dc2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.230.253.132","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.230.253.132']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26cbca95-e1d9-5b7f-bca1-12c7fb838286","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.71.247.126","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.71.247.126']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c9a607-b9a1-503f-8825-94789fae51de","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 209.103.243.96","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '209.103.243.96']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c77c494-5ae4-5097-890b-068d599261c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.96.252.171","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.96.252.171']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d78428b-d9b0-5bc5-a9dd-1bfe6bd7e0d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.44.26.227","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.44.26.227']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82c6c5a5-cfd0-534d-9ab2-3e16da7479a5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.128.244.24","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.128.244.24']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f7b8fb5-bac1-5e2a-b994-1072bac23ffb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 123.165.81.60","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '123.165.81.60']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e2091c3-617c-5ba5-a14a-df3d43e4143c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.12.142.129","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.12.142.129']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bad61e82-0b09-5514-803e-e8398369e35d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 201.177.17.158","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '201.177.17.158']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--391b1c79-5e5b-54c8-9fe7-3920c85126bb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 151.54.175.253","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '151.54.175.253']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c31255a0-c49a-5bb5-a4f5-f631139a0b2c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.105.198.195","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.105.198.195']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4a0d1f8-f330-5699-b189-0a98a8a0dd94","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.97.239.28","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.97.239.28']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--516d66bd-b76f-55e3-8384-7b8fb142df0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 159.223.29.238","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '159.223.29.238']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b035e44-ec3c-50c7-b32a-fb9baf2e11d0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 23.254.242.32","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.254.242.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ba3beb9-1de7-5dbd-8c60-21e669c14a8f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 107.172.218.176","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '107.172.218.176']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f2f7ede-b826-546d-8339-8f0f3f21107e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 160.251.173.161","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '160.251.173.161']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44b92330-c38f-51df-8b1e-251b6f07966c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.148.129.112","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.148.129.112']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4be9661e-6e5f-5803-b13a-8175c7a35279","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 124.123.72.74","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '124.123.72.74']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79861eda-332d-55c0-8bb5-cbbfdee9e26c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.248.10.233","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.248.10.233']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95c6d9a-de5f-58d3-acbb-fb63df7d9b6a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.60.61.179","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.60.61.179']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42482d49-bf99-5eca-882c-f7c2ea660329","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.46.214.123","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.46.214.123']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ff4d0d-726d-515b-a6d1-5b3a4615b4a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 157.245.37.206","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '157.245.37.206']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df31ef8d-41e2-5c09-8e65-c01ca50f0fb7","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.155.131.250","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.155.131.250']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d1506a7-300c-52a9-98f9-9b30bcaff124","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.134.23.41","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.134.23.41']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bfd1f64-aaff-5d61-a507-8a05797fde37","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.242.3.229","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.242.3.229']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--061497aa-eb97-5913-aa7a-84a0463372b0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 77.68.32.53","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.68.32.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd4a4bb-04c6-53b7-b34f-dd277d136ac7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 2.57.121.25","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '2.57.121.25']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5baf10a0-4a0f-5f74-ab4a-765b3959b9c0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 67.205.143.171","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '67.205.143.171']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f024ad7f-804b-5e76-b83e-cb66f9ab780a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 61.105.6.100","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '61.105.6.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--079a3b54-9eb1-516e-840a-cac09add1cbb","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 116.123.150.72","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '116.123.150.72']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f93cb48b-5517-5a49-93ab-f34cac4f3804","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.162.127.79","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.162.127.79']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fd150d-9d29-5213-9601-e95e7861cacc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 15.235.183.101","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '15.235.183.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1767e4-43ac-5c90-98e9-ca627b72477f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 141.94.47.78","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '141.94.47.78']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e525cfb-61cc-5f52-b50f-8180e9dac45b","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 20.198.118.186","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '20.198.118.186']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcf87979-7aed-546a-8278-2cccc5b1e348","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 173.249.59.206","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '173.249.59.206']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2653806a-d816-50df-b192-8611e97a7d04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.129.69.48","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.129.69.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aab4e18-f853-5128-bade-8bb8f069d2e7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.133.65.112","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.133.65.112']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0743b1d8-b28e-5028-aebb-66decc0d8c05","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.151.182.31","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 90/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.151.182.31']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":90,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b6a9f2-8f85-5e03-90ec-4156667b3f21","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.233.156.122","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 89/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.233.156.122']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":89,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c129421-b23f-5369-b601-4a82e74aa3b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 103.112.97.83","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 89/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.112.97.83']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":89,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c81a4273-2cdf-5459-867f-82257bef0b89","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 178.158.214.101","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 89/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.158.214.101']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":89,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a7c5595-b6eb-5e40-a5db-ef416aa683a1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 175.203.168.36","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 89/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '175.203.168.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":89,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b6b79de-5b76-5d76-93b3-7d772365e480","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 130.12.209.134","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 89/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '130.12.209.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":89,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66f64c0e-9a94-55bb-8d6a-b429bb37fd22","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 57.129.134.159","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 88/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '57.129.134.159']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":88,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--240e9f3d-361d-5893-b792-1340681da69e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.194.18.69","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 88/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.194.18.69']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":88,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b2c79d6-e778-5fcf-a5a5-40a16ce1312b","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 115.95.83.169","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 88/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '115.95.83.169']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":88,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10d9c71f-c226-5862-8c6b-534f5c67d0d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 103.180.134.39","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 87/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.180.134.39']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":87,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cf43f4e-2ca7-529d-8ff0-211c7c0a83db","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 81.10.39.215","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 87/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '81.10.39.215']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":87,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3586e2f7-e6c5-5959-a3c0-c843c4e631e4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 72.53.216.142","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '72.53.216.142']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--148df3c1-bcba-597c-8b26-baf9d2ce4f38","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 87.232.98.98","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '87.232.98.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7301e6c1-7b40-5bb6-ae8b-ad900879bbc8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.53.199.246","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.53.199.246']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7207074-5472-5e60-bfa2-6554f13b122c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 118.220.222.8","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '118.220.222.8']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a4263ce-3927-5dc1-90fc-820d8e164edb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 51.91.159.141","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '51.91.159.141']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88034263-b83d-503e-98a6-fd9eeddc273a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 124.56.22.15","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '124.56.22.15']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbcd7dfc-b555-5ea8-bea3-fcd2cc8d538d","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 219.117.200.63","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '219.117.200.63']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b9634f-d05a-5106-a77a-8f27a1010570","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 61.85.36.35","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '61.85.36.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02bdd9eb-12ae-51ac-b5e5-fd2205f47bdb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 27.79.7.170","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 85/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '27.79.7.170']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":85,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1dbf01-098b-5859-bd1f-8a743517a207","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 169.58.49.65","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 84/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '169.58.49.65']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":84,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32d16aae-0bbd-5778-9ac6-71bc565039cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.134.68.207","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 84/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.134.68.207']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":84,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--522f7017-460d-57f9-8c11-12f262c05513","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 121.186.191.74","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 84/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '121.186.191.74']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":84,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f68b71ae-e453-5582-80d1-c1ba2abc93eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 111.68.4.14","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 84/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '111.68.4.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":84,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b027d8-dc27-53fd-b214-207565b4775f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 121.161.122.89","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 84/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '121.161.122.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":84,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8a619e7-c171-5cb3-ba13-618a7ccd8c04","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 77.90.185.20","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.90.185.20']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a922613c-be91-57eb-b812-c3fd070e295e","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 107.173.214.153","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '107.173.214.153']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3117df5-42f2-5205-b261-700d2db5b05d","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 79.175.93.31","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.175.93.31']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea303c9-97ea-5896-9e4a-c791ff147d05","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.46.255.86","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.46.255.86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa59f2bf-9843-5187-9122-9e4d7b4eb9a9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 123.141.253.53","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '123.141.253.53']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb3877c9-218b-5d29-9c51-88a2e6239096","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 121.139.15.185","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '121.139.15.185']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0c71f26-0812-5e5f-8f80-50c3d27aec46","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 23.95.2.82","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.95.2.82']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49659d38-90fd-5da1-95de-aa34f7d1f81c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.31.117.25","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.31.117.25']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb676ca-d0d3-5439-b1c9-24dde4c58d00","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 182.70.249.137","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '182.70.249.137']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3f76763-3cee-5853-ae90-a8291b527134","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 149.202.51.11","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '149.202.51.11']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bb80044-94b7-5cf3-8379-9d022ea3256b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 60.104.53.20","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '60.104.53.20']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c382f6ef-8584-55b8-b49d-d43604061daf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 87.107.112.99","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '87.107.112.99']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbfefcd5-ea9a-54e7-8d31-4f909d961abe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.225.210.153","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.225.210.153']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ed6ecd1-51ff-52a7-9f15-155ba5acb0e5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.59.206.223","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.59.206.223']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd4d56ab-e41a-5e97-aeff-90d89a7c92f7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.53.253.223","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.53.253.223']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d58fbca8-cfeb-53fa-9312-8e4422015725","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 192.3.170.224","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.3.170.224']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd993b28-f479-54ae-88b6-8c3a5b8e42b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 178.105.41.176","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.105.41.176']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99438411-d3f4-5daa-bd93-31a6409a8b59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.130.10.148","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.130.10.148']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2276952c-b419-57dc-a527-c699087de2ad","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 116.110.211.213","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '116.110.211.213']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b23ae89f-b969-5558-aace-cc0c8ffacc0b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.154.43.144","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.154.43.144']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35956412-ec94-5690-b026-e8412c235d54","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 92.118.39.49","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.118.39.49']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1410518-c3e7-5877-9969-4402c7fcecde","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 104.237.145.228","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '104.237.145.228']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf62f396-3bde-5a5d-bdf2-fcd6ff44ae8a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 167.71.192.149","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '167.71.192.149']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cb362f-b4d3-5f5a-a780-e72534613ea0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 221.1.111.98","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '221.1.111.98']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fba654-fdfa-5314-a920-c87adb3904fa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 125.178.83.134","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '125.178.83.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--430d0631-0ea6-5a3f-a05f-4f567246ff9f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 65.49.20.67","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '65.49.20.67']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d33ca19-e044-5d77-8090-7935d985b465","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 13.228.7.109","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '13.228.7.109']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a47338d-015a-5296-b6bb-c951ea5121fe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 18.223.29.55","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '18.223.29.55']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77755b12-7b51-551d-8dff-14bba638b19f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 54.147.8.161","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '54.147.8.161']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb3975e-b8dd-5a71-a058-4cf5f61ec7ba","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 98.93.214.80","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '98.93.214.80']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db532d18-9319-5fe7-95d2-9d9cd3d38693","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.167.77.16","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.167.77.16']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f80a42fa-6df5-564a-b097-cd1d1787b6ed","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 89.43.28.134","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.43.28.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fce7e75d-4b8d-5912-bde1-df20ff9a65c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 78.47.83.135","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '78.47.83.135']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4afb20f1-4004-5faa-a48b-5aa4d79d14f3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.79.165.102","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.79.165.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbcb5668-9a68-5f63-9fd4-7270517de1a5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 64.207.185.5","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.207.185.5']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d330e8b-bd33-5766-a211-94c83628f8f9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.153.34.112","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.153.34.112']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a48302b6-dac2-530d-9be7-d288551368e8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.40.171","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.40.171']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02383069-869c-5b6e-ba2e-08efdd19dcda","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 177.53.87.161","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '177.53.87.161']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--321eb62f-807d-5a25-9488-c48ba5af456d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 119.176.53.238","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '119.176.53.238']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8bf382f-bee5-5cb1-bf84-c351af565457","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 103.126.118.226","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.126.118.226']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5f015ff-d059-542d-8a68-cb1d1b4d296d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.42.172","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.42.172']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a74b318-d52d-5c01-a7bc-df99f0b09599","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 162.255.112.183","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '162.255.112.183']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1017af88-a944-547c-accc-d0c54fe515ff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 177.53.66.178","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '177.53.66.178']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14fbb256-2de2-5f0f-9fe3-a142c78f770d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 183.146.107.210","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '183.146.107.210']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eccd3624-081e-528d-86c4-b3aaf1d1319c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 118.161.208.18","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '118.161.208.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57bdf51c-a1eb-5fe3-a3d9-90ddef45aa5f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.61.47.118","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.61.47.118']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a74640-6ca5-5c3a-bb24-66c4cbfbfb6c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 138.84.41.23","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.84.41.23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8b5b9b5-2791-55a6-9418-f6cd8863093a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 177.70.145.92","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '177.70.145.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51e4d7c2-9e4a-5b38-b412-cceb86a4934f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.57.207.6","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.57.207.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dc5e9c-49a0-5701-b0da-67b994fa035a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 170.244.45.254","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '170.244.45.254']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c251d925-c3a0-5a37-ba48-07b92abe1db9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.170.136.28","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.170.136.28']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07a47587-7cec-52e2-b2be-15c59913074b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 171.61.23.78","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '171.61.23.78']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d53b62ef-e468-5a41-8de1-567f17ca4d23","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 14.212.187.25","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '14.212.187.25']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4cc0557-bdad-5610-aacb-08ff5e4ac5e5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.178.29.73","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.178.29.73']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--007b495a-f1e1-53b9-bb0d-39e40203010c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 123.96.50.166","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '123.96.50.166']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b20f44-e0c7-5a77-a419-8415671301a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.178.110.232","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.178.110.232']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ecb8f20-bf65-5d93-a257-da785b4ed0e8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 168.205.205.109","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '168.205.205.109']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8e28558-dad2-5b8f-a53d-b80358ade4d2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 95.232.64.115","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '95.232.64.115']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23530716-dfb9-5ca1-9e73-b49c1b9f2d22","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.97.239.30","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.97.239.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff3c3c7-7d6f-5951-8e88-9d8e9faebf3f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 177.66.17.52","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '177.66.17.52']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67a491a6-9866-5ce5-a5c5-020676f9c1e5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 64.187.121.21","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.187.121.21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--693673b6-f641-5c4f-a051-6d51ff102afe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 168.210.92.53","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '168.210.92.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a549c5b-a049-5800-a2d5-5fab6206adba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 178.104.90.251","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.104.90.251']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ea84b4-b7bd-52f0-b8ca-e49fb7322ae6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 129.226.201.189","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '129.226.201.189']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8be7f64-b6a2-5ab1-9c26-bd319ada8bff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 23.170.48.33","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.170.48.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02c38f4b-891b-50ef-90a3-cbc756b9cd9c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.232.68.89","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.232.68.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd2ea9df-5213-5d87-9b3e-9ec3486f52a1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 23.147.56.51","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.147.56.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--569b02ad-736b-5fad-8200-bf7768e47523","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 217.154.150.0","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '217.154.150.0']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af8f5cd1-0c0b-5e6a-b2fc-f03c59d1a328","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.103.84.128","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.103.84.128']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1ce703b-2446-5e9f-842e-3be501f744b9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 156.239.238.244","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '156.239.238.244']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d203a95-d16f-5c8c-9db4-c736853a23e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.53.254.198","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.53.254.198']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--586a8e86-a128-5485-a64e-c9c9f3259fcd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 114.70.63.104","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '114.70.63.104']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35fd4ad3-5709-514c-9931-2ad527b8532c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.134.182.81","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.134.182.81']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2570c9-d1d0-57f2-bdae-9c5e6fb5b4f1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 20.241.133.127","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '20.241.133.127']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--055cbfbd-9117-5c7c-8510-1c99b5299fe8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 116.118.9.79","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '116.118.9.79']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb7e3167-4d9b-5461-880e-4d83c8857d89","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 191.55.48.166","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '191.55.48.166']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5d720ee-8f51-5982-afc3-2fdf6c2b9be8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 168.205.81.235","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '168.205.81.235']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3157582-7cab-5a22-a24b-67bb46f2b828","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.44.50.6","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.44.50.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1163d298-b9bf-5fc0-b871-372ac8a81515","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 149.109.89.152","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '149.109.89.152']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58105aad-0ad3-572a-9d30-41383ff45ed9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.48.12.35","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.48.12.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45e2e6bb-f710-5304-a48a-7e813e4ba5be","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 213.174.0.201","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.174.0.201']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af4d020e-e065-513d-9b40-8a6531aaf809","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 74.122.175.32","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '74.122.175.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45c8f474-ef57-56fc-a65c-8d45b47fda50","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 146.120.251.75","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '146.120.251.75']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5b29f5f-61d5-58b3-8ac0-b6e41607ff97","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.70.58.103","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.70.58.103']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fd98ee4-ee80-581e-8df6-ecec5d63a2ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 177.92.167.195","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '177.92.167.195']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--842bb747-3fb1-5de6-9e6c-bffdcda0a14f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 192.141.115.126","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.141.115.126']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a521d9-ae1b-50bc-a024-dd365115f124","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.26.13.201","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.26.13.201']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2814acbb-48af-5b44-9fd9-c3a2e30392ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 212.8.60.97","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.8.60.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c1bf334-d6a8-5ceb-92b8-9421ddd1f66b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 117.163.241.64","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '117.163.241.64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca10f87-7cf9-5003-8759-2b5d1efb96db","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 105.98.48.88","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '105.98.48.88']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--088fa340-af3c-5ebb-93a0-301c65bc19bd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 179.63.109.9","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.63.109.9']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b06c8f3f-a760-5404-bfa6-283788f9ca30","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 201.179.139.241","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '201.179.139.241']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7e1436f-6005-58a5-8ba9-bbec729043c5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 2.192.240.189","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '2.192.240.189']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c7040e-b109-5dbd-81ec-501ff256bd31","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.201.77.112","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.201.77.112']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bcac02-2583-52ca-a25e-b7f231118892","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 149.107.215.105","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '149.107.215.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78b06d4d-bfe2-54a9-af12-5b558a7108b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 181.233.26.219","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '181.233.26.219']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--143031ac-5b8c-58ea-a6e0-5ff007fb489d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 104.176.155.234","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '104.176.155.234']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3cc6f18-7cac-5ce4-911a-35457f7d74d7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.70.80.107","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.70.80.107']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cbf963-80f6-5c4e-a5e3-1132c86fc643","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 79.43.14.36","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.43.14.36']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--117f3329-375b-5c4d-b398-0d567dc0bd5a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 165.232.143.119","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '165.232.143.119']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8747f38e-a3c6-5dcf-bcb7-1162429f9b7a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 89.58.12.105","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.58.12.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d381f46-6f97-5cd8-9b08-8bc2203ffe19","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 64.226.70.41","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.226.70.41']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aed9253-f5c5-59d4-80aa-3521e95e0804","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.120.191.93","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.120.191.93']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7b2c41d-9162-55fe-bd09-a9a2692d17ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 197.158.28.148","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '197.158.28.148']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--592109c0-ffd6-51f2-ad44-6c40706a2ef1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.18.18.208","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.18.18.208']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db327cc4-0fc2-5400-b93f-db900f4757b0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.217.107.250","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.217.107.250']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a59240b-88b0-58cc-ab8b-a19587af920c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 95.217.225.116","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '95.217.225.116']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--583aa1d2-2b1b-55fa-a781-93bf1989e388","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.53.54.144","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.53.54.144']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5dbccd-fc47-55f4-88a3-b71414ed95e2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 40.81.23.49","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '40.81.23.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9457ec9-8a19-591d-9a93-3500360c6378","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.135.98.66","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.135.98.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--448f4d95-b9a4-55f3-9780-8a6c7e122858","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 89.163.210.169","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.163.210.169']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78a5bbbd-8f90-57bf-ae61-261c2f479675","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 2.57.122.168","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '2.57.122.168']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--085eda8a-c187-5e73-9db1-acbc3ec341dc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 217.59.129.228","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '217.59.129.228']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e90ee24-b34f-5124-9511-9488803561a0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 202.61.252.80","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '202.61.252.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--049b3ff4-cc12-5e19-a296-bc81e260c3e9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 222.117.107.192","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '222.117.107.192']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6614d44-ddf7-5d8c-9b95-4f784c8aa01f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 15.204.94.7","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '15.204.94.7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63488dd2-947c-5551-b950-403c954f8197","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 139.99.221.130","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '139.99.221.130']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2656bbd5-2e40-5dba-b11f-a8d60aa89b10","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 146.190.85.221","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '146.190.85.221']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e5a86b7-f023-56a0-89c6-1fae3fc8d1ac","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 72.133.41.189","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '72.133.41.189']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e45b79-d04a-503f-a17f-b8f61d9ab68e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 165.154.163.119","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '165.154.163.119']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb58c9d0-5479-5f40-8fa1-1f2d059c192a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.183.253.128","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.183.253.128']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29331a31-9702-5493-890e-288b4da27b37","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.172.92.108","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.172.92.108']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef53ec3-8871-593c-8ef7-793456f2bfda","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 82.64.187.87","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '82.64.187.87']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524ba19-d106-5adf-8243-cfe6ed55e614","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 167.172.66.42","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '167.172.66.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e05a63-0724-592d-8c51-bec989d7f697","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 155.138.242.33","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '155.138.242.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6040fc57-7515-58f4-8076-c5d7f2c00bc7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 51.91.158.32","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '51.91.158.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9576ed67-107d-598b-a556-cea8a6ade5c8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 34.156.213.236","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '34.156.213.236']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b85256bc-de53-5b7a-8e98-3f66daaf2692","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 171.243.150.32","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '171.243.150.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a03dab-4ce9-56f2-97e9-e198740ce73b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 151.42.171.198","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 82/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '151.42.171.198']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":82,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4feb3226-0e86-5ec2-b621-3fa903fbacb0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 217.182.204.9","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 81/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '217.182.204.9']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":81,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e0939e2-91f1-552d-b2a6-85c8e56fd975","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 140.245.49.59","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 81/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '140.245.49.59']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":81,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d72a3b63-c067-5405-ac89-7a10a4346045","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.164.6.113","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 81/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.164.6.113']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":81,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4150881c-1a74-50e9-a94b-fd2a1caabaa2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 167.99.76.192","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '167.99.76.192']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--228c29cd-3a65-5f1f-97e4-bd97df402515","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 75.65.131.20","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '75.65.131.20']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06bfad50-f74a-5b54-81d4-d530aac33f89","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 221.152.121.242","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '221.152.121.242']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6331936f-ccdf-5c9b-9e5a-6a04848d611c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 163.41.112.89","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '163.41.112.89']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10d647a-ee11-5201-a4c6-974acc3ac6b8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 150.241.245.127","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '150.241.245.127']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8640cb04-0781-5612-b663-c304cfd665c6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.153.138.134","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.153.138.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17022f14-1813-535a-83d5-68022b3eac7e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 208.87.206.165","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '208.87.206.165']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3157eb07-826f-5522-99ee-704c530d51d7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 73.94.254.152","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '73.94.254.152']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d34c60f-8105-5c60-acba-3e592392689c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 163.7.4.20","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '163.7.4.20']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d107a9-8f42-5d57-aa50-36298f692aac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 104.168.100.167","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '104.168.100.167']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--653bcacb-750a-59e1-aae4-a2fa0ad65c5f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 115.95.123.202","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '115.95.123.202']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb0239a-3364-5457-8626-f7ee8e59147a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.198.254.75","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.198.254.75']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0201e7ab-e052-5849-8df3-13c629ac3567","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.146.20.35","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.146.20.35']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b7077f6-f736-57be-95a9-a938fe5d4a95","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 66.154.109.117","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.154.109.117']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d04c1d7b-a3a0-5f97-822a-520d06c5a62a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 54.37.78.251","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '54.37.78.251']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22bae0e-71f1-59c8-a9b9-214b9b17f735","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 54.89.170.205","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '54.89.170.205']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--300fc47a-5ef8-5622-95b0-6d3edc7faf88","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.255.98.119","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.255.98.119']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcc0b821-5776-5200-9076-ca76f678a091","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.202.170.236","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.202.170.236']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66e02f13-1d4d-5ff6-8068-393c5eb38a8f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 154.64.245.13","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '154.64.245.13']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b133df9-8a68-53e6-b632-05823622bf17","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 14.43.37.67","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '14.43.37.67']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a2665a1-6656-542d-b0df-8b7330732c72","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 14.35.195.45","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '14.35.195.45']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d7580c-afa5-5c9d-99fa-2d631d4755ad","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 82.152.164.175","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '82.152.164.175']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d758f3df-e869-59a3-aecf-6992943f2053","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 86.127.237.96","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '86.127.237.96']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de01f61-a660-5fa3-9daf-2ac189df19ba","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 119.64.59.76","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '119.64.59.76']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9f4115-f1b7-50a5-a6f3-24e0f935e5fd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.231.34.224","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.231.34.224']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6d09c7b-c695-5bd6-8222-c2f7c51857e1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 135.181.26.126","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '135.181.26.126']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--553f5169-401e-5ff2-a0af-363da949a11a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 204.152.221.161","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '204.152.221.161']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--607db53d-da4a-543d-bec5-fbb271d95039","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 79.220.15.253","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.220.15.253']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92ad19ba-d7be-57ac-b898-dcf4ddb91235","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 65.32.76.214","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '65.32.76.214']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5527bd52-09c7-514f-b26b-3c11a37ca4cf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.128.43.79","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.128.43.79']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bce04e73-1990-57c8-b0bf-ed902b94a382","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 89.168.43.135","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.168.43.135']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6bc4334-30c0-587c-8265-0b5192a7498a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.249.197.50","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.249.197.50']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e08b5cb2-0af3-5def-adde-5e4b01d126ef","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 4.204.40.180","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '4.204.40.180']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6ac0041-affc-55ca-9070-984b68ff62db","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 85.215.44.183","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.215.44.183']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f270a404-82ff-542f-82f2-61621794199c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 38.244.14.159","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '38.244.14.159']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b7d8fcb-ba28-50ea-ba55-f616662d0c40","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 213.227.151.237","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.227.151.237']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0782d3cf-08de-5578-8011-e649d6fc2afb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.146.77.37","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.146.77.37']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58b7cfa6-4a77-5f59-acc8-5797119eaa9e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 58.235.190.97","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '58.235.190.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0899d81e-f8a8-5aae-ad46-1f6544cbe8af","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 155.94.142.85","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '155.94.142.85']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c09e292d-c8b4-5d6a-a359-78ac0924d937","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.123.212.37","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 80/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.123.212.37']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":80,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53eb179-e83f-5c59-8d2e-ce85e017000f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 187.198.170.176","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 79/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '187.198.170.176']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc9f3eb6-e70a-58e7-9b83-9f9371269f5a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 78.47.206.103","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 79/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '78.47.206.103']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":79,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af474729-234d-586e-b7e8-e43d98b7f282","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 130.12.180.51","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 77/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '130.12.180.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":77,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae797f6a-0da6-58a8-a30d-ab764e334d42","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 141.95.19.37","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 77/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '141.95.19.37']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":77,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a70f4f-2282-5e52-a331-7f8d6e7957cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 149.165.168.169","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 77/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '149.165.168.169']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":77,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1b78a72-699c-5e5e-b1b2-0370e13c66f9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 85.215.42.241","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 77/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.215.42.241']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":77,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ca3df6a-be6f-51e1-89bf-6c66d2b527b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.59.110.211","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 77/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.59.110.211']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":77,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6d8dbaa-faab-5324-b8d8-d90256193c8b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.108.248.184","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 76/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.108.248.184']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":76,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7af3e57f-8370-5d73-a0d9-5a7d719ec76e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 51.75.119.30","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 76/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '51.75.119.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":76,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb71dcb-a3fd-5faa-93d9-cefbb9f95951","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 82.165.94.38","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '82.165.94.38']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1caac7-b7dc-5183-bec3-d7b8b6ba1d68","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 220.80.135.143","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '220.80.135.143']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d9186e8-9b33-570e-b831-3cf615065f7f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 90.79.249.187","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '90.79.249.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--676d91ae-9107-56b0-bec9-447dd5096345","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 118.141.37.23","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '118.141.37.23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0092d32-edee-52c6-8350-85bec7876afd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 160.30.78.31","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '160.30.78.31']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8640fbe3-1253-57c3-a95c-f16c1fdb402c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 150.5.136.87","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '150.5.136.87']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50a32eb-dde7-5eb3-a971-2acbb821b748","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 130.162.56.155","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '130.162.56.155']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c65b9da-11a4-589e-bb77-771e3938b735","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 82.165.218.97","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '82.165.218.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e373cda-22ee-5908-9303-83d2b1f8e801","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.225.78.48","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.225.78.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67e4661a-fcc4-59a8-8cc1-9337eac222e6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 73.94.70.45","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '73.94.70.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--732890c9-ea72-525f-a53e-1107c6097c8e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.144.179.246","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 75/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.144.179.246']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":75,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fb9db3e-2bb2-5ef9-88d3-9477126b1a2e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.128.214.214","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.128.214.214']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a717fc20-8741-5782-9f48-ce55c84087a2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.154.43.210","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.154.43.210']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16b7e463-4554-5920-ae27-9e644adf6930","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 65.49.1.212","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '65.49.1.212']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc3ef77-9e10-5184-ad87-baab51214bc9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 207.154.245.51","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '207.154.245.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31327fa2-83ac-5a82-8721-f5f3c85bec04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 167.235.135.122","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '167.235.135.122']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7810366-4dee-541c-b060-b0a460e263bb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.143.61.192","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.143.61.192']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f7b56c0-c7a2-563d-997b-f94d5a6d6c1e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 58.231.69.120","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '58.231.69.120']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--161bb448-6ea5-55d1-a2d8-118a23c83706","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 217.154.150.9","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '217.154.150.9']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c7aa36-c6ff-50c4-8854-dad71079e4e3","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 72.167.38.71","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '72.167.38.71']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bedab91-f1a8-5ea2-b755-d1ff97eccdfc","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 27.4.75.142","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '27.4.75.142']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--850cbec0-9192-5e04-adb8-5beacf46e935","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 115.215.8.205","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '115.215.8.205']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c884b39-0826-5d1a-82f9-836b4b00f210","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 115.212.133.49","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '115.212.133.49']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e138fc97-600c-5087-9210-e0fc4f9bf6ba","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 183.151.56.126","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '183.151.56.126']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f4de09a-7111-56aa-a4dd-30b26a53ed7f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 125.126.9.13","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '125.126.9.13']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9111410-d913-511c-b29b-b4b84b4a251d","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 58.48.134.147","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '58.48.134.147']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7b189bb-f4c2-50db-9d27-1141aead8365","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 122.231.135.121","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '122.231.135.121']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--005e88b4-4da4-5a9f-b154-2856369691e2","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 36.25.33.93","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '36.25.33.93']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9663f836-2c9f-594d-bb0f-ca0780344722","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 201.239.183.109","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '201.239.183.109']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f23baed-23e4-5847-9e13-5b085779b407","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 115.206.117.208","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '115.206.117.208']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28abd8e0-15ff-521c-b4a9-f6a19ff0634b","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 122.241.244.50","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '122.241.244.50']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf1a0f00-c7f2-5dac-8548-0b69badd47e8","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 125.113.78.166","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '125.113.78.166']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89dc36bb-94ce-529f-b313-87dae563936c","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.148.225.3","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.148.225.3']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c89ffd8-c2ad-58e8-b590-8dddd512b992","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.191.92.62","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.191.92.62']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--998e1c1b-df34-5df5-8aca-848161cf9679","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.172.218.158","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.172.218.158']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40fcf2d0-7ab5-51d3-8a1f-a625c4f57c74","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 170.82.66.80","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '170.82.66.80']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--999ac654-28ef-563b-b33d-6c2721a321f7","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 110.36.11.177","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '110.36.11.177']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fca339fd-2fb4-5d75-9b86-2f1dfa512125","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 196.115.195.233","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '196.115.195.233']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d193772-7262-57de-af04-58bf0f96ad87","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 60.175.67.66","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '60.175.67.66']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03bcb76e-6483-55ab-b996-884e506336ce","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 191.55.53.87","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '191.55.53.87']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e099fdbb-5a31-5e1f-8e91-e1d1cd8aecb6","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 213.32.22.42","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.32.22.42']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f1500c-5ef1-5981-894e-27181431aef2","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.16.17.137","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.16.17.137']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a891fe58-5301-5a05-bb2b-6430e2d68bd5","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.130.35.229","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.130.35.229']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02add5bf-2e61-5300-89c0-e62cf07de491","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.216.97.18","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.216.97.18']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4706419-4ac4-52d2-8a1d-792ae2ba50b3","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 220.82.236.135","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '220.82.236.135']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e41f8624-a279-57ff-8f44-c73286ac0230","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.16.17.141","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.16.17.141']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--125191a9-ca1f-526f-bbbd-734cba6349bb","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 77.90.42.3","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.90.42.3']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cb4ce5c-4f91-525a-8667-cbc391410f15","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 121.134.185.166","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '121.134.185.166']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6224a16-53e3-5e28-badf-9e536aa35964","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.53.52.136","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.53.52.136']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c75f85d-b105-55ec-b104-db6383c67e8d","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.178.110.228","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.178.110.228']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5397e988-326c-5277-a413-661ea9da07e8","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.16.17.136","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.16.17.136']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60255719-24b6-5e49-8129-7e4da30cbc0b","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 107.148.229.185","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '107.148.229.185']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5104590e-a142-5be8-9b1e-ca7b5193ce2a","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.16.17.138","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.16.17.138']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce10024-f433-509b-8ba6-ac355709ef1f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.82.86.94","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.82.86.94']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--740e4941-5fe4-502b-b573-9585a39bd1b0","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 162.55.51.14","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '162.55.51.14']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--529890c2-9359-50a8-8eb2-f8db5028d087","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 78.47.87.101","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '78.47.87.101']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6f64885-3a79-5cb1-a5a6-08161f153f74","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 110.139.126.185","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '110.139.126.185']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09a06b5a-5bb3-5693-8e2d-8178b446858b","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.160.198.114","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.160.198.114']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff9bec3-5a6d-5325-ab13-ed77330c3089","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 105.224.39.17","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '105.224.39.17']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8060b776-e45b-5b97-8496-b46f5396c5a2","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 213.5.192.200","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.5.192.200']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6e09149-c422-5ee0-be5e-0d7c07df68f8","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 123.139.55.202","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '123.139.55.202']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c6271f6-2a0b-55af-927c-ab53b49c7a8a","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.104.37.146","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.104.37.146']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14513052-b7ae-5492-b89c-7e3c01db0c8e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 93.177.151.72","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '93.177.151.72']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af5b9eb7-3329-5ff4-b1b0-12018ee74dd2","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.44.123.123","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.44.123.123']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf0aac13-f86c-5986-a37b-4dad2445f6bf","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.200.8.170","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.200.8.170']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4b75e6-156e-50cd-9bed-7149d0a7a89d","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.55.136.173","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.55.136.173']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25b377b0-fcd7-5beb-a7cd-c451473fed91","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.116.203.224","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.116.203.224']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b681fa02-fb6d-5a3d-9d1b-1f8ac05913cb","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.64.239.49","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.64.239.49']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a69e1b7-5032-55f1-bb91-cfaafcaf6574","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 191.5.152.243","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '191.5.152.243']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9677e26-519f-50b1-ab3f-217ff09ef06e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.201.82.57","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.201.82.57']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d33bc52-1d76-54a5-86ed-323f697d52ae","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 1.30.190.42","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.30.190.42']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3dae50e-59ad-58e2-a911-b771fe86946a","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 200.125.93.246","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.125.93.246']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c0b8a43-a79c-57db-9ff1-ea2328f76dfb","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 192.162.210.212","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.162.210.212']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56c2ce75-2e41-5920-af77-fe180f051f59","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.102.192.245","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.102.192.245']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a0c5300-2f02-5fe1-a9a4-96ad5e076e93","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 39.46.131.248","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '39.46.131.248']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5fd14cd-4794-5d49-8f30-3b7c28530186","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 200.123.52.160","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.123.52.160']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32cfde03-6b16-5bea-9cfd-a55b4bc78a62","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 89.167.114.179","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.167.114.179']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd191cb-fb5c-55a3-8f4c-f505e7675672","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.132.228.37","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.132.228.37']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--076af936-6603-515e-9089-fb910d73f247","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 220.86.129.106","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '220.86.129.106']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5849f67e-d70a-5763-a2b4-76273c1fc998","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 24.181.69.247","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '24.181.69.247']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--575c8700-b69d-5cf3-8864-dd6766179bac","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 189.1.188.124","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '189.1.188.124']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac9abcb0-bf6d-5df3-a7df-687ca97e60e5","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 79.210.152.35","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.210.152.35']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75d4bf65-f5e7-5a8b-9a58-123b9aa0e972","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.119.224.28","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.119.224.28']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--103892d8-4db8-5ba8-a7f7-d877ecc5a79c","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 189.91.14.112","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '189.91.14.112']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f502db5-ccca-51b3-9808-8bd39fbc9e12","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 202.92.128.216","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '202.92.128.216']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3596d56b-cc6c-5094-a2dd-6cd86e0c7fd4","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.181.182.48","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.181.182.48']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b52b17-2cdb-575e-b8e3-96d51a9fcced","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.163.104.248","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.163.104.248']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cee4df1c-ed92-5936-bb50-61d1f27e47ee","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 62.3.42.80","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '62.3.42.80']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08b8293b-55fd-5bf3-855e-1a0e3e96b05c","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 15.204.118.38","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '15.204.118.38']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--427b3703-e0d0-5418-a6d8-2411094c56ae","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 156.47.118.34","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '156.47.118.34']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9834ed0-7b02-5918-bee3-a690d218b541","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 129.159.225.44","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '129.159.225.44']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5698d68-c6fd-5c42-a155-0c52fd0610e3","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 178.105.235.156","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.105.235.156']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f474c9dc-a58e-5a71-8213-eff8df425ed9","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 67.215.227.54","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '67.215.227.54']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6113be96-ad3d-58a3-aaeb-85c3c53048fa","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 179.104.48.170","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.104.48.170']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f02ccb3-d9f7-5617-9579-684866b998a8","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 43.167.234.40","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '43.167.234.40']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--370c6666-fb53-5904-82be-de842f95bf67","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.136.31.153","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.136.31.153']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--826aa9a7-e33a-50fd-96c7-32739131b1a9","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 138.84.158.108","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.84.158.108']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad0fb1a8-8db4-5df3-b786-613b0fb02c69","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 66.154.115.247","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.154.115.247']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcd582dd-0b92-5b48-b416-f9f8727cceea","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 52.159.119.130","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '52.159.119.130']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4d8d1bd-1066-5cdc-ba54-57939f3dbe7c","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 188.27.255.116","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '188.27.255.116']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b9294ae-1d32-5cf3-ab5d-1acfb969ce95","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 159.69.107.97","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '159.69.107.97']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff4c5cd-6140-5cc9-9bf8-dd698bb3586d","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.45.101.104","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.45.101.104']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b72dae-eaa3-59ef-826c-d4ab5f9d7236","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 119.192.243.186","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '119.192.243.186']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aab4cfe-1817-50af-afd5-1e11028eec73","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 34.156.162.78","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '34.156.162.78']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbe274d4-5e03-51c3-a1ec-190c2213d3a4","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 110.38.211.212","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '110.38.211.212']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de3eafe2-51da-5245-a1c2-1f5eb5bdebc3","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.40.5","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 74/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.40.5']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":74,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ace50465-6dc2-53c0-9fb2-67a769ac2dab","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 119.199.160.42","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 73/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '119.199.160.42']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":73,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--004d8c92-51b4-5ba9-b051-f9f32be123bd","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 151.252.94.135","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 73/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '151.252.94.135']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":73,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2ce6f4d-6ab1-580d-bba6-7cb54602942c","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 111.32.90.33","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 73/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '111.32.90.33']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":73,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15ca8682-6da7-5a7c-8b2f-5ce8af55ef36","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 187.158.16.104","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 73/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '187.158.16.104']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":73,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23a9e920-4740-571f-b54c-c96d69ecfc4f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 149.71.44.53","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '149.71.44.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff5603e-a678-592f-bedc-62a7d6e7216d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 125.178.243.115","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '125.178.243.115']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeb298e6-d347-5535-959b-95d847f83cc9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 220.82.85.144","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '220.82.85.144']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2b13783-6a92-58bc-880e-f78722098db0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 116.110.223.152","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '116.110.223.152']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a265986-00b6-5baf-8d52-2efcd4a1013d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 109.86.1.50","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '109.86.1.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8458f89-9e39-5ad6-9be3-804bc6583716","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 211.208.149.156","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '211.208.149.156']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09ba8112-7abc-58a4-b268-df1772e55e78","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.2.222.104","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.2.222.104']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8a724e-1a49-5554-8592-f027ea9bc5f9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 175.137.68.65","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '175.137.68.65']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--262e9df9-ab82-5344-b619-c667d22db358","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 139.162.89.236","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '139.162.89.236']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6356da1-6160-55bf-a4ed-22ddf539f517","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 75.119.136.224","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '75.119.136.224']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e191d1ba-fe39-5832-b660-a656e183ec69","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.116.73.100","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.116.73.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27c9136a-4ef1-5b49-93aa-c0c948b08b1c","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.32.11.205","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.32.11.205']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3907ece7-0349-5ec6-b3de-4cf3475feed0","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 107.175.122.89","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '107.175.122.89']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1a7c02e-6882-5e37-8365-b6523751880f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 164.68.126.145","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '164.68.126.145']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--094e2c87-3df7-5a93-a8d2-f33a74f9e055","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 198.98.53.110","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 72/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '198.98.53.110']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":72,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0baa05-a1db-5b34-9ea8-971ae5734ddb","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 139.19.117.129","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 71/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '139.19.117.129']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":71,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcbd3543-6218-5c13-b421-e669c45b741f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.16.17.140","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.16.17.140']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d777af8-1688-5dab-b140-3f7ef9e81a4e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.60.239.199","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.60.239.199']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c6c76cf-9e6e-5616-9957-a16dfcdd28db","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 69.138.209.180","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '69.138.209.180']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--694f9f8d-5b4b-505d-af2b-408d4ec6c80d","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 142.154.84.131","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '142.154.84.131']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8811ea6d-4aad-5cda-8a3c-4cb5565c4dde","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.76.28.231","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.76.28.231']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fca05b7-2b16-5849-8529-e4a1b3707937","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 138.84.156.71","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.84.156.71']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8c6b33a-39b3-57dd-a013-eaabce7e40a2","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 47.236.165.237","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '47.236.165.237']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba03bf41-1270-54d4-a367-7c7059f615dc","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 2.26.18.111","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '2.26.18.111']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b27c54a-37d9-5d9c-a148-69104c151c7e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.92.216.66","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.92.216.66']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65138978-9d68-58d6-a9cf-77fd5010ff4a","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 125.178.189.201","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 68/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '125.178.189.201']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":68,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--070c5cf3-e49f-5bfc-b717-e0439d45979e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 74.82.47.4","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '74.82.47.4']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9719c0-150a-567c-ad37-31bb5ceb9b73","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.42.81","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.42.81']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ad80c90-4d3f-5e82-a265-97a38eec105b","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 128.14.232.186","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '128.14.232.186']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--763a9122-b49e-5c84-8730-f50011c1ee7e","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 50.35.63.102","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '50.35.63.102']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9ff163-ed3e-5527-aa25-5a99e5face0a","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 59.55.24.238","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '59.55.24.238']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28c23771-4f0c-5c95-8550-a382d5aac748","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 125.114.201.78","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '125.114.201.78']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--468ac129-0a7d-5be6-a93b-625835029004","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.178.110.218","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.178.110.218']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b490edef-ea06-5b3a-8136-c68fb302ef9f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 102.97.58.108","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.97.58.108']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c670c7-ac3a-57ba-b684-badbea9ca4a5","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.148.10.183","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.148.10.183']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a61e33b-6400-5b3e-a102-02f38c10b702","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.154.244.83","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.154.244.83']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ff4d0b2-94a7-5bdf-994b-dd008a7edd9e","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 138.117.14.173","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.117.14.173']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34060773-43fc-5b82-afd0-30894867ae2e","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 122.116.145.26","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '122.116.145.26']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15489014-60e1-573e-a77c-738d15581be2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.97.239.29","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.97.239.29']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ded1af0e-6f0c-55e8-905d-30f1210024a1","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 93.170.116.43","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '93.170.116.43']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4abad520-bede-5af0-8b11-f6ab61750e4f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 201.188.232.131","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '201.188.232.131']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dd4ad85-c959-5f20-8f6f-4ed90ac72caa","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.227.245.63","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.227.245.63']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a205be-c694-5685-a8fe-805e344306c2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.31.120.132","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.31.120.132']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26d2c981-3358-50ac-a09d-855513873d89","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 200.123.53.231","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.123.53.231']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a4cbc34-8d8f-56f3-8685-2148a52a804a","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 189.142.100.143","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '189.142.100.143']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c5544e-383d-537b-b6b8-859c9141065a","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.30.243.229","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.30.243.229']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f9051bc-c28f-5611-8438-285ef545fc28","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 189.163.144.255","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '189.163.144.255']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f177ca42-cc05-5131-a18b-703c9bd2a6f7","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 95.46.142.67","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '95.46.142.67']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c92b432e-cab8-5f0c-81fd-fc16d1aae5d7","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 64.226.122.0","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.226.122.0']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97de1454-c4f4-5503-8eb6-d9f26d16d5eb","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.106.108.102","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 67/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.106.108.102']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":67,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6ced52f-143f-5476-ad3a-cc5cdb3534b7","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 102.132.190.137","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 66/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.132.190.137']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":66,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b07a6633-6228-590e-8116-7ee9d5c514fe","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 141.98.198.116","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '141.98.198.116']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba5ada8-7ab9-572a-9d77-07ef0952d958","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 89.58.10.21","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.58.10.21']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f84963f1-b21d-5075-b2d7-b47541437c6a","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 85.221.202.129","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.221.202.129']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--319fcb92-cd02-5f93-9c0e-1442f1a6558b","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 144.91.111.110","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '144.91.111.110']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93679a21-1dc1-596b-b815-6ee8f4c98ff2","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 80.241.219.89","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.241.219.89']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7bf02e3-b2e6-54e5-ad36-7a8491c87660","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.149.66.61","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.149.66.61']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56b6e7ae-ddd3-595a-bec8-c339e6c9534f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 75.119.143.144","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '75.119.143.144']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3649bbb6-9c4d-57ef-b000-b67db68d57a3","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 59.28.19.72","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '59.28.19.72']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--802643aa-8157-5168-a2ec-a6122c791011","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.98.170.2","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.98.170.2']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02d5f37-112e-5de4-8267-28955089aab6","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 165.227.229.146","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 65/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '165.227.229.146']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":65,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--138c1c3e-248d-5f8f-8693-283e357f9095","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 142.93.58.163","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 63/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '142.93.58.163']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":63,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f574d120-016c-54d9-a9d2-8e5cd063a45f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 212.8.242.38","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 63/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.8.242.38']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":63,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6071c392-c380-57a2-ba70-625716de095b","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.39.73.45","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 61/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.39.73.45']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":61,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acf486dc-30c5-524b-b0cc-31ea7fc5b18c","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 57.131.131.73","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 61/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '57.131.131.73']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":61,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--431e07fb-dc42-58a6-8d18-8d60a968d1f4","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 54.37.226.197","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 61/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '54.37.226.197']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":61,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c2d8e3-bdce-5730-b595-946a6b1ca993","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.164.94.244","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 61/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.164.94.244']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":61,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d000103d-09b1-5d28-8ec9-9d84eecc25b2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 23.94.108.103","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 59/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.94.108.103']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":59,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--205fe7e0-792c-5d5f-a28e-803cd4cfa9e4","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 38.83.138.198","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 59/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '38.83.138.198']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":59,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf22ee6-637b-51de-b6f9-0d9fcc7e503d","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 81.169.241.114","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 59/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '81.169.241.114']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":59,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--065a1945-553d-5716-be06-249958c895e8","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 87.76.209.3","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 59/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '87.76.209.3']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":59,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06064d45-b3e5-515c-aabe-52ab035647c1","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.163.162.5","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 59/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.163.162.5']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":59,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7aa221a-9eda-57d4-b727-e9975cf6d6c3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 186.122.10.221","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 47/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '186.122.10.221']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":47,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--936207b5-e4ac-5019-acd8-d6adae8ffe88","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.99.7.39","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 47/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.99.7.39']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":47,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--896e43d6-7c8a-550e-8289-61fc9ac2668a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.216.74.178","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.216.74.178']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4576d433-9f35-5ce5-b68d-c29a0336df1f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 210.113.107.88","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '210.113.107.88']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6a34a1-9aac-52ec-bb6a-8ad766776926","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 138.201.249.42","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.201.249.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d13f1c3e-8e74-5979-ba98-dc9776ff78c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 23.254.212.184","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.254.212.184']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d444132f-dd54-5868-bccd-a63902709d04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 161.97.148.30","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '161.97.148.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e76d073-ef95-56d0-800e-fe216f65c096","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 180.57.180.48","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '180.57.180.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc8693df-8fe7-5d2a-8662-2faf9aec9357","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 161.97.94.173","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '161.97.94.173']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe8ada97-5552-5915-ba61-66d6932b6477","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 85.215.237.20","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.215.237.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--236d5daa-deab-521e-934b-382ac9c409b5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.199.130.61","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.199.130.61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fe6ecc8-f66b-5059-9d6b-0a451331a4e8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 85.95.188.50","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.95.188.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e887ffb9-d2c1-5ac9-9513-46ccea200d8d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 92.5.66.49","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.5.66.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89574d6d-3287-579c-8004-3c37ffbff72f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 105.225.100.190","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 2 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '105.225.100.190']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aef98568-ff64-5c9a-9295-6e006da1e998","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.20.125.30","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.20.125.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0f5956a-7a5f-5181-980f-13d2237cee67","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.96.45.50","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.96.45.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f696952-7639-5e9b-94bf-37895735e0fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 74.12.184.63","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '74.12.184.63']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faec2155-c740-51ff-8079-d235c76a97a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 73.89.93.89","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '73.89.93.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a9f07b1-37e5-5e68-8bc1-5a56417cb500","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.93.229.234","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.93.229.234']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e5da26a-a966-53f7-8f5c-4bb01b52ee4d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 189.203.96.204","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '189.203.96.204']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b539bd0-b4d4-5e42-83f3-03893ab053bd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 45.159.89.69","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.159.89.69']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d968af9-a46b-5b04-a158-609b67a1b655","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.102.219.224","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.102.219.224']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc31b43-7187-5ae2-954d-ce2ef9c919b5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 95.47.115.178","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '95.47.115.178']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--835a5844-070d-537b-9564-e86f2ad5a2d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 14.187.16.203","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '14.187.16.203']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16e6df40-13d0-5a42-8659-0b83bd5f16d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.211.163.155","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.211.163.155']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--914f2414-4927-527a-acb2-4ac6ae269c08","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 144.31.118.100","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '144.31.118.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c31c8402-47fb-52b6-8523-3e1e7491f7b9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 98.48.1.200","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '98.48.1.200']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c9f1ce8-91c7-5b13-a72b-5fdabbc587d2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 79.122.2.66","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.122.2.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df5d24c1-0778-50fc-a502-ca1f50ec48ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.191.145.241","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.191.145.241']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08cf4c2a-725b-56fa-ad0f-d7cc5796743b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 200.229.144.235","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.229.144.235']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6437a0e9-125e-5b52-ae91-dde3946dcbb3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.155.212.107","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.155.212.107']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ccf994-70d5-52c2-980a-c8d8d8e6fafa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 168.90.127.12","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 42/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '168.90.127.12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c7bf4e8-918f-549a-9c9e-0aab34cf785a","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 93.171.214.249","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '93.171.214.249']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f4f6ed1-fc2d-5a5c-8957-14aae60ba855","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.92.47.6","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.92.47.6']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed8b79f-de54-5a59-aa45-efee2bd0ec27","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 187.45.54.147","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '187.45.54.147']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b74be75c-6e96-58b1-acab-c5d31244bb03","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 88.183.227.71","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '88.183.227.71']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c0e1612-9eca-5ae4-8a3b-6889696d95c8","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 183.152.229.119","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '183.152.229.119']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0678eed7-1bab-5aa3-aeca-2b78043c5a07","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 58.62.126.238","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '58.62.126.238']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9a64d37-092e-54b2-ba5f-8ad28af2ae51","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 213.177.179.62","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.177.179.62']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6310340f-590a-5dc5-8206-790b224e6c3f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 103.172.186.196","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.172.186.196']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7816f9a-eb61-5081-864b-052a5c0312df","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 179.127.96.134","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.127.96.134']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f6172b9-336b-5f2f-86b9-6f63182c1ff0","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 195.178.110.227","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.178.110.227']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0923a7a-c736-5d02-9c8e-87ed62f4ad9f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 68.183.69.247","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '68.183.69.247']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eca1979b-9542-59dd-a375-01690503ce82","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 80.94.92.234","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.94.92.234']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc89336-583f-5d26-88cd-8f65b5f1c547","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.32.162.42","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.32.162.42']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ebb73ac-f6b4-5186-9508-c77be624d5d1","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 93.171.169.12","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '93.171.169.12']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8766f28-f705-51ba-a23d-f8ca89eed0d3","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 178.150.124.8","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.150.124.8']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40497dab-63f6-5871-8f67-dfcc05854c54","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.237.243.229","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.237.243.229']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--044dbe70-5955-51be-b468-7d67256195ff","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.43.51.246","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.43.51.246']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad052a7d-ab2f-52b3-8667-a22f813c101d","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 82.59.40.114","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '82.59.40.114']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfe9a883-f746-59c4-bfff-b3d3e913b835","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 212.90.63.60","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.90.63.60']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--725e3d94-d304-540e-b4cd-ff495d5fe29f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.39.227.112","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.39.227.112']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed68e7f0-75eb-5f83-b8a2-3653c81ed40f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.203.101.99","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.203.101.99']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d28032ce-33b0-57c2-b385-4cc33c27def9","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.145.183.182","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.145.183.182']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca0ba4f2-3dbf-5e49-8a46-cd69d0e46ec8","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 177.38.22.2","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '177.38.22.2']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--832e5523-a1e3-5abf-955f-5a723e63f7a2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 187.67.57.125","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '187.67.57.125']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0e249ec-341f-54bd-a42b-55cd6af1c9b9","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.204.135.17","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.204.135.17']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--617f5a14-9298-56f2-acd8-0f942d14b503","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.194.7.248","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.194.7.248']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d13385c-0017-5f28-9b78-bb1a80cfd70b","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 105.186.221.249","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '105.186.221.249']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea1d113-1f46-5113-9d5c-faa082d552c2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.0.87.133","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.0.87.133']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31c015f5-cc64-546c-99ca-97084e97d0dd","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.221.196.248","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.221.196.248']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c30390c-4db5-5d0e-a15a-a43cb4ba66ae","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 20.3.129.142","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '20.3.129.142']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60d703aa-58a7-51a4-8c7c-be2cb9873773","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 65.49.20.66","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '65.49.20.66']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a98e83bb-3b8f-54d2-aa4c-a6113ef51cf9","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 139.99.69.227","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '139.99.69.227']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca922a5-5e7c-5ebd-ab15-e547126a37d4","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 192.186.11.90","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.186.11.90']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2a8dac4-004a-5b13-a72e-da78c81e8374","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.132.64.114","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.132.64.114']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--529e9872-d70a-5be8-991e-f97919febc12","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 159.195.60.71","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '159.195.60.71']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37e14dc-7ee3-57d7-a6bb-56c9ccc0a191","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 94.16.17.139","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.16.17.139']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ecf2fc-f2bc-5c56-a00c-52db40b3f2da","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 196.119.152.107","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '196.119.152.107']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b7b132d-9088-57f9-a8ad-960c762bd3b7","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.105.161.7","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.105.161.7']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41479027-2a44-5043-95ed-76d2c9f9bc29","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.107.171.233","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.107.171.233']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42c34bce-2434-5ba9-8e97-3783495c4b40","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 128.127.117.240","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '128.127.117.240']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ec85e30-bedd-5510-a2d2-9f8ab35eafb0","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 212.164.39.164","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.164.39.164']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3f3ec4-e1bb-55b9-95bc-f5c08e5ef83c","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.207.128.162","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.207.128.162']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daac9b49-83ce-5fd5-a9f8-043e81d2060c","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 27.130.237.60","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '27.130.237.60']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1427700e-4baa-5c94-a4e4-0cfe8c080062","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.110.31.206","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.110.31.206']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7384e632-31e4-50e2-a599-1a74ddb676dd","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.211.80.208","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.211.80.208']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40636440-f5d0-5575-a8ee-c84d9f616906","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 178.187.69.106","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.187.69.106']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--109207b5-838c-5c79-8532-cf96c891d3dd","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 179.190.122.204","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.190.122.204']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fc4ba8f-b0fe-5f3a-89f0-889bc8230df1","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.193.131.131","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.193.131.131']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf8801e0-1eb9-5194-b9fb-e826ab3c55be","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 136.169.215.132","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '136.169.215.132']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85361172-c0c7-592a-851e-63af54b79d8e","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 91.205.199.180","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.205.199.180']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13a09a72-0642-5ecd-b26b-c07ca02830fb","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 116.87.148.181","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '116.87.148.181']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2784edb-248c-5252-87aa-c3464df6ced0","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 2.61.167.149","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '2.61.167.149']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--758572b2-7ba7-56ef-90e9-984ab0869497","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.172.84.207","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.172.84.207']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4106d556-c9a8-5634-b4df-0cb3c8c9dafe","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 193.34.173.178","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.34.173.178']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78da6f2-f50e-52af-a60d-fc24c4f23c68","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 185.82.178.67","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.82.178.67']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d794003-d23c-5891-a09a-99b94b518f4f","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 223.190.83.39","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '223.190.83.39']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4dd172e-335f-5e83-9ca8-fe694c2358c8","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 88.175.246.181","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '88.175.246.181']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e023b2df-1e10-516f-bb25-d82433bb4e10","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 128.140.76.196","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '128.140.76.196']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07fc881a-2cb9-532e-b0c1-88a0ca70e262","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 31.43.49.235","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '31.43.49.235']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1ed127-4f7d-505f-a327-1b1682ae3923","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 105.157.155.75","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '105.157.155.75']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff71c7e-2a06-5483-add3-e61177294e43","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 194.4.70.53","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.4.70.53']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87b729c9-0315-57d2-9ed6-0c3f4220a829","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 70.93.3.196","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '70.93.3.196']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c401b434-64fc-5162-99b9-2b8382e2aa02","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 190.162.14.68","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 35/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '190.162.14.68']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":35,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89307e4c-7052-51fe-946e-40ec6f68012b","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 77.239.124.248","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.239.124.248']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10f92817-6060-5ec4-aa4b-b1aa18244469","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 95.155.151.113","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '95.155.151.113']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--003b2cc5-ed83-51e9-a577-54794183ee53","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 116.140.142.18","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '116.140.142.18']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f829c07-3e5b-5f86-9ef2-7f19f45a6702","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 157.230.236.73","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '157.230.236.73']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3353371-ca73-54c7-84ef-823d3f21908a","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 149.107.253.14","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '149.107.253.14']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76281366-58ca-5893-bd5f-409db28b7674","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 112.121.204.181","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '112.121.204.181']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e2ebff1-6145-5a3d-8a76-52fdd194a577","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 192.162.32.236","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.162.32.236']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a7af7fc-a244-5acb-be03-330234b8bd6d","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 124.165.36.151","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '124.165.36.151']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e2247f5-ecf4-50db-a9b4-7c62a928266a","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.200.65.174","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.200.65.174']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf30026c-aa55-5096-9d8f-65ebb9e70afb","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 187.67.249.13","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '187.67.249.13']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e150be8d-b8b9-57bf-bd17-9ced7a460433","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 176.126.143.0","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.126.143.0']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4b20f36-de0b-5b64-9035-f5b8cd98f8b5","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 196.41.84.200","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '196.41.84.200']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56206e06-0e1e-5242-9e6c-4289f61e9314","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 92.204.138.44","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.204.138.44']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b5fda2c-deb6-56e5-82ec-30f47cb7f4da","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 157.245.130.173","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '157.245.130.173']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9fa3b86-e1cd-5947-bc67-a6091ac74fbb","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 213.230.78.75","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.230.78.75']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e63b609-f46f-5f30-8402-eea7be578984","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 5.138.198.113","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.138.198.113']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c53bd33-a7cd-57a3-9a12-fd5093550bc6","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 152.172.228.40","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.172.228.40']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fd58dd0-8cc6-5a01-be19-d37564790f4e","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 14.192.213.143","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '14.192.213.143']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81d29ba9-096e-518f-9ae5-1f0e5dbec56c","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 85.175.197.236","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.175.197.236']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fd1db4b-c8a8-5ea4-a573-ede9a430998f","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 39.34.194.178","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '39.34.194.178']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac6e895a-48ab-56a2-92d6-ae4d83e24b04","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 102.96.164.195","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.96.164.195']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f097bf77-61ab-5eca-8b1f-0032b91e277a","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 179.174.147.174","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.174.147.174']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fabea8fc-367e-593d-af00-ef364127d33f","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 78.26.151.165","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '78.26.151.165']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0737334-ebf8-56a1-9156-18cf7a7ce85a","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 200.102.196.238","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.102.196.238']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e961145d-c5c9-5c15-8c22-2672d3891282","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 37.32.73.156","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '37.32.73.156']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcea149-c73a-5d21-b4db-b939519597de","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 189.203.100.110","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '189.203.100.110']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08f7315-154a-59fc-9a2d-4e8124064fdd","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 93.107.209.31","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '93.107.209.31']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--211061b1-1eb9-5048-b1b3-de4f09f30872","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 46.172.83.110","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.172.83.110']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds","payload_fetch"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18cbb174-b6f1-5c13-8d92-8a876044184a","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"honeypot-attacker: 77.226.173.107","description":"Witnessed first-hand by DarkWick sensor do-nyc1. Score 32/100, 1 sighting(s), confidence decays with half-life 7d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.226.173.107']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":32,"labels":["darkwick:provenance=observed","darkwick:category=honeypot-attacker","darkwick:sensor=do-nyc1","darkwick:family=honeypot_attacker","honeypot","credential_success","post_exploit_cmds"],"external_references":[{"source_name":"DarkWick honeypot (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--905123d9-b53d-5908-8550-327da2acc05f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 171.25.193.77","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '171.25.193.77']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b20dfbe9-efe4-5538-a72a-43a8f5ff604a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.42.116.16","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.42.116.16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5b7f370-392e-5fbb-91eb-1f0944a9e923","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.220.101.21","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.220.101.21']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19756cab-baf8-5ad4-a965-b21b419bfdbf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.220.101.12","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.220.101.12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33a25f85-11e5-5b31-95ff-9204fb9e0984","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.220.101.20","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.220.101.20']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adcd85b0-b706-5faf-9f20-e68fb14f5293","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.220.101.26","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.220.101.26']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7c235f-1e77-55e7-85eb-88a580c60d84","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.220.101.0","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.220.101.0']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a6e26bc-cc04-5093-9ecc-33286f516578","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 104.244.72.115","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '104.244.72.115']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3929dffa-4959-57b4-8f01-f3700e8780c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.42.116.18","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.42.116.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13961fff-6a6d-5815-8c61-b4673e0e3f4a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.42.116.14","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.42.116.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4738403a-18f3-58db-9f30-f594fb33f9c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.42.116.17","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.42.116.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65ff6bd9-d9a9-5a41-9885-cf3ad05542a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.42.116.20","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.42.116.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06616eda-3467-5d86-b43a-8e7df27c4c7b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.220.101.50","description":"Aggregated from open source feeds. Score 78/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.220.101.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=attacker","attacker"],"external_references":[{"source_name":"GreenSnow","url":"https://greensnow.co/"},{"source_name":"Tor Project","url":"https://check.torproject.org/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15d1c899-eadf-5aca-abec-0747ec896831","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 13.94.254.200","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '13.94.254.200']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:319739"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52386ab6-f3f2-5364-9b44-ec1ef07ac628","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 194.224.249.214","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.224.249.214']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:309508"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de86141-f224-5c4e-91a7-90e7228aab7b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 52.157.207.201","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '52.157.207.201']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:194780"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6398f058-af19-54a2-a176-679ac271e613","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.109","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.109']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:96279"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d19cecc7-19b4-5ef9-b2cc-096f2ec97279","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 143.244.186.35","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '143.244.186.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:92007"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48867282-6407-58f9-be9d-6985c2c9b647","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 18.116.198.191","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '18.116.198.191']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:59907"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0369c4c-234c-54eb-a477-b56d131b8538","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.198.163","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.198.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41378"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c06c1a7-1d0b-58ae-9210-4ea01169f0f0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.198.103","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.198.103']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41346"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d724f93c-b680-5d62-9e2f-556727d8d74d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.198.187","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.198.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41332"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5aa696cf-23b3-5246-8bba-0a5cec7f0631","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.122.204.71","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.122.204.71']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41221"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--409b94a0-5100-542e-b356-97866bc4657a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.113.115.104","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.113.115.104']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41164"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be91650-8ea9-54ac-a84b-7532c7705120","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 91.240.118.59","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.240.118.59']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41148"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--653024d3-fc70-58b7-bb51-425cf30d7141","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 62.204.41.205","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '62.204.41.205']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:41094"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8273ea6c-b650-5089-b31f-0ca0bf78a7ce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.198.61","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.198.61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:40959"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a4a996-9747-5ca6-b292-737ee375dfb1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 62.233.50.245","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '62.233.50.245']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:40869"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff1c5095-4cbe-5555-a9f0-fe44c54a2525","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.81.68.110","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.81.68.110']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:40860"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50fb93cf-732f-50e8-8906-addedf1d64fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.198.153","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.198.153']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:40261"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa19fc1b-83a9-5181-bc89-d58cdf5c452d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.196.156","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.196.156']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:39822"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--740cd40a-2ef0-51ce-a9e6-d96c8a2f2e64","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.108","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.108']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:34020"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0675aed5-23fb-553d-b024-dfadaa32c8d2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 49.88.112.67","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '49.88.112.67']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:32881"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d9327c-3816-58a0-b6d9-14b896cc7080","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.123","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.123']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:28149"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d9a0ee8-cf3b-5c3b-ba41-c7048587c737","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.128","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.128']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:27407"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3394d3df-251e-5b56-b169-e84dfd21acd9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.18","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:27006"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edffa1a4-e3b7-5293-ad75-d5a37830162e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.93.201.57","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.93.201.57']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:25622"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--270070b8-f944-5630-83b9-f8d68371d905","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 77.83.36.40","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '77.83.36.40']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:25152"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be43a63a-731d-55ca-b706-ec14bd1ca379","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 66.240.219.146","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.240.219.146']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:25108"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4680ad8-fb56-5ce7-894d-c31c29b9ce3d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.73.124.50","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.73.124.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:24988"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ed78d72-3929-5cfd-b89b-8096a92ee67d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 216.127.175.10","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '216.127.175.10']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:23788"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aa90aef-08dc-5e8b-8815-df24fbcdf41a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 216.127.190.44","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '216.127.190.44']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:23787"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36640d55-b9d3-5620-9aa7-d332c0cc47b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 170.178.223.145","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '170.178.223.145']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:23774"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66af59e3-9b81-54a6-87b9-585fe59d7408","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 23.234.215.49","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.234.215.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:23689"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba53092-fa0d-5c2b-a32e-7b54c7a28d1d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 92.255.85.183","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.255.85.183']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:23585"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5383508f-7326-57ae-87a9-3dbce5bd8559","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.65.246.97","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.65.246.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:21369"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--077713aa-8428-592a-8ca0-cc181f787642","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.65.246.98","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.65.246.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:21185"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc63f857-0036-53f2-8cb5-3a99257b0556","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 194.26.29.31","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '194.26.29.31']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:20898"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf12e0f-a6dc-5e9b-8115-daa028239dd4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.161.184.151","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.161.184.151']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:20450"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c491b911-3004-5ae3-892f-8f10dd837d9a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.20.186.68","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.20.186.68']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:19752"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ddf434-550b-5ce3-b446-d25acd4f2cc8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 85.145.131.51","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '85.145.131.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:19672"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5086dc94-0477-5578-987c-ce8774581716","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 49.88.112.68","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '49.88.112.68']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:19477"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa936782-f89d-566f-a643-51a7c81e2658","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 79.124.59.154","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.124.59.154']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:19162"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd68fdfd-0dc9-5f0f-99c6-3d53063bde3e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 154.53.57.35","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '154.53.57.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:18810"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b53e28b9-b869-57f1-99cb-5c3072486886","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 23.94.163.118","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.94.163.118']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:18295"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e51f77c-3616-520b-ac9c-a9365431ac22","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 154.53.58.77","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '154.53.58.77']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:18231"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e40a581-3253-5164-b354-57fe0278539f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 128.22.166.92","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '128.22.166.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:18036"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9993443-5301-508f-a058-eb7f276d9c38","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 23.94.236.153","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.94.236.153']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:17887"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--846e548e-2994-5e7d-b3c6-71c91021d6ae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.3.111.147","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.3.111.147']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:17859"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d7805e1-31cc-5814-97c4-1d154df61e86","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 210.149.87.87","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '210.149.87.87']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:17453"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09cd1f07-1507-5668-9b7d-014dac033930","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 109.106.251.95","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '109.106.251.95']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:17096"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce32c37d-ccfd-50bd-8ef6-ef5c8645b8ee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 210.149.87.84","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '210.149.87.84']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:16296"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef043aeb-6e89-56ff-a2e5-87b35d023406","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 150.66.45.69","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '150.66.45.69']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15953"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cdd0184-7756-584a-8d42-561ad289bbbe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 212.70.149.2","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.70.149.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15790"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1de76c30-fbfe-50b9-a8d5-467e4f645f67","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 23.94.236.154","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '23.94.236.154']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15694"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--527afde0-bc7a-581d-9793-2e6646889203","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 210.149.87.83","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '210.149.87.83']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15634"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68685cc-8995-5d59-98b8-ea20424e814a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 133.36.50.97","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '133.36.50.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15409"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37e7bea6-297c-50aa-899c-b166bf58d12b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 128.22.163.45","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '128.22.163.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15209"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c37441d-a11c-5fed-9a4f-fb7cb0db71f1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 66.94.120.125","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.94.120.125']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:15019"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0212e6b4-5144-5630-b0fe-b7fa3e6cae0e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 210.149.87.92","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '210.149.87.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14695"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9268ee77-be55-53c1-a208-3b6bf2c4deb7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 154.53.57.220","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '154.53.57.220']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14615"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61902025-14ac-525e-8400-29d461e5fd11","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 195.226.194.242","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.226.194.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14512"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d857831a-6bc8-519d-9e74-2d223fe7ffd9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 210.149.87.93","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '210.149.87.93']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14502"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f66b9c6d-068c-5d3f-8841-080c7ad9a5df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 192.3.111.146","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '192.3.111.146']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14493"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcff5407-d3e3-5669-9ab3-5ef05ff8d922","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 219.122.253.248","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '219.122.253.248']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14480"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2aacf41a-245d-538e-b2bb-cfe644528281","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 179.60.147.204","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.60.147.204']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:14241"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e99e2060-d810-5e23-8145-b2f4540ec543","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.184","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.184']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13993"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9ee7a31-402a-5348-8a49-57d20a3363ee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.186","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.186']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13785"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf232c8d-34be-5dbe-a3cb-b6b4d042b390","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 20.106.77.45","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '20.106.77.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13764"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f207c84-5024-516f-8452-1653e18800ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.187","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13416"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06230f62-d15e-55a2-a230-33996386aca9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 79.124.62.130","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.124.62.130']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13398"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--684e7cef-cb09-532e-9fba-d3a261d414d1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 79.124.62.82","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.124.62.82']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13305"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07cc1d3e-d57f-554c-bd12-37ec210c7bab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 79.124.62.78","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.124.62.78']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:13245"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c27fe92-8695-5052-9ce4-c7662ed828e2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.22","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12938"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fcbe04d-27f3-5370-aaea-55db96488361","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 150.66.51.124","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '150.66.51.124']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12919"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ad81abd-304c-54ed-882e-de746d93db00","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.246.220.98","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.246.220.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12887"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--677d7229-53ca-594f-8d18-e7a5badc3d3e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 79.124.62.86","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '79.124.62.86']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12635"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff4cf559-ad8f-5e15-9f2d-d7012d306eac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.51","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.51']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12298"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ab46159-6ee2-5e4d-aaac-007abed2a992","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 212.70.149.38","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.70.149.38']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12219"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab27b6cd-c097-57a0-b374-368d07614b43","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.93.201.59","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.93.201.59']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12183"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d465e8cc-0bed-507c-99ec-c0b55e378b68","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 164.92.136.3","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '164.92.136.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12071"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f119ce6e-27c6-598f-a108-f3ffddc39ffa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 92.63.197.94","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.63.197.94']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:12000"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f355d91-6884-59e7-8974-18e7b13d753d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.202","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.202']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11416"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab7fb170-384e-543b-a462-aaebf35d9bb7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.89","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11359"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3955f6e9-f440-5ea0-b5ff-59cfd82f1d30","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 92.63.197.131","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.63.197.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11281"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1e9f3b-b3a7-50a8-902d-2fd42fbb1e09","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.156.73.107","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.156.73.107']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11225"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd8c1a7-8e36-554c-b4fb-2cbcc8c33373","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.53","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11205"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0698ec06-8cbe-503e-998d-4e411041aa9b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 51.89.255.217","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '51.89.255.217']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11052"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d25af14-b803-5d03-b646-e0a97c03fe05","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 80.66.66.35","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.66.66.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:11031"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74fe1c2b-3c34-5d5a-8bb1-1102f545a4cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 71.115.205.1","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '71.115.205.1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10717"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ff04c06-8dbd-59eb-ad56-8fe1492dc968","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.143.203.59","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.143.203.59']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10616"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4433c4e-39c9-5edf-9d39-91b6de0b0f9c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 146.88.240.4","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '146.88.240.4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10550"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b02fe3a6-74f6-54f0-9dad-921e8b036324","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 178.128.206.48","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '178.128.206.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10406"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b8d2d9-5bb3-57ad-a850-6f46bda3e101","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 212.70.149.134","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.70.149.134']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10389"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2138bd6-78b4-502e-9c90-13aa09a66246","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 212.70.149.14","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.70.149.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10362"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcd25d1f-673a-5653-b124-e006998414e6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 152.89.196.211","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '152.89.196.211']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10229"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98009266-7cc5-5aa8-915e-9c61bf5ce03e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.252","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.252']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10196"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22cfd91-9e0b-553f-8c74-55c534fec717","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 20.225.220.28","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '20.225.220.28']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10046"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a214b698-3ca5-5dfb-abd4-fcb8a7891fba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.156.73.122","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.156.73.122']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:10018"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d40f50b-6ac4-5d1a-bd70-352cfad04fb0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 218.92.0.195","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '218.92.0.195']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9928"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef28cc7-6a59-5b43-93be-1a630bbd73f0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 46.161.27.98","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.161.27.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9688"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3055f760-c347-5a7f-ae47-7b88e015d19b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.224.128.17","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.224.128.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9647"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c26a68-17d4-59f0-bc4d-d86ab55f71bd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.11","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.11']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9606"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e29d3d12-7643-5e7e-b475-8d849d0cfd4d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 80.82.77.144","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.82.77.144']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9546"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2605c217-f4a4-56ac-a50e-691c86c25bb0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 50.203.212.217","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '50.203.212.217']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9516"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--378f7703-a00a-5ac5-a5a4-861262f07ca0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.176","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.176']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9409"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c94211f-2264-574d-98f2-cd53eed0748d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 66.29.136.194","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.29.136.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9313"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fddb1ee4-df9a-5cbb-bf12-72a95e1315c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 66.35.60.131","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.35.60.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9111"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e3f6f4b-b465-5403-abd0-8ff8e2e646b1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 164.92.136.2","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '164.92.136.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:9061"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74e92af5-15ed-50de-9d71-8765b022d3ff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.58.60.205","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.58.60.205']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8767"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f474fb-439b-5be9-b193-75207aa33d2f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.203","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.203']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8743"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65a531a8-e8f5-55cd-ad20-4c97a52b0de2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.195","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.195']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8734"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bb31d66-eb7d-55c2-a0a4-c031b37adc4f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.68","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.68']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8726"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47665b2b-09b3-5e05-a5d0-916afb71ded7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.143.200.50","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.143.200.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8702"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f937cc6-2a92-58bb-828f-0333abd08469","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 20.125.141.33","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '20.125.141.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8612"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a45b1fd1-c91d-59a3-a8e4-1d4d3de35cc6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 64.112.72.94","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.112.72.94']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8549"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78fea1a-3c08-5f08-b0c4-13b2eaa6dc5e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.143.200.102","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.143.200.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8546"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55130e40-5ce5-509b-a32d-10fe9177ea20","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.42","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8515"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e61ed2a-4cdc-578d-9708-f24648cc7145","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 104.248.42.17","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '104.248.42.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8360"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c166acb8-bb13-5d53-a038-e7318278c642","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 61.177.173.22","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '61.177.173.22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8145"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95394363-319a-5f1a-85f5-a9d2c57b689a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.10","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.10']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8108"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4b4dc0-c9af-50e8-a167-83cfd87ca8e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.156.73.157","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.156.73.157']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8057"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b269266-3c28-54e8-8f07-157597dd4369","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.35","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:8011"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--858b66c2-359a-57cd-ac86-dc913a11c50d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.187","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7975"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ffc48e-3c8e-5e72-bc4d-8a5c8595ddb5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.251","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.251']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7954"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3212dfc-770e-57bb-9077-1a1cda21f873","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 212.70.149.46","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.70.149.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7940"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50015ca5-3e4b-5793-9866-6cb6e913ae78","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 92.63.197.133","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.63.197.133']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7912"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92c49fbd-c3bc-5aab-8d4e-1584338f07a3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 5.188.87.5","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.188.87.5']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7870"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae82f9c8-8594-5428-ad70-da7c8a597d5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 181.64.10.35","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '181.64.10.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7756"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3f2b9e-a4fe-5b94-b33d-e5219e8a7504","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 107.189.1.122","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '107.189.1.122']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7735"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83dad9d2-75c6-5a8e-9185-7938d26e9689","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 87.246.7.70","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '87.246.7.70']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7618"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdce2834-49cb-53d9-a043-ac68b30d4778","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.156.73.57","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.156.73.57']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7483"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--585bc18c-aa6e-58b4-980d-641e7294411f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 216.39.253.10","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '216.39.253.10']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7423"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e436ab0b-c80a-517a-8dd7-d98312da3602","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 92.205.165.186","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.205.165.186']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7420"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a62f24cb-fd22-5b87-88a1-2c60e784adee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 87.246.7.206","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '87.246.7.206']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7415"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91a837ca-d709-5e0f-97c5-439cc4fdbd24","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 66.29.147.113","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '66.29.147.113']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7338"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a2ad57-fcbb-58dc-aef8-f522471e49f0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.227.253.98","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.227.253.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7299"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e835e5-def8-5ba5-b165-f5881a1791ba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 198.58.115.123","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '198.58.115.123']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7077"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0ef10bd-295a-5535-9ead-37cf25b8f980","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 46.17.102.30","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.17.102.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:7068"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc42163-f486-53ef-baa7-041dec23f859","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 46.148.40.168","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '46.148.40.168']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6953"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--079a338f-bb65-575a-9d3b-6058c36c0baf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 64.39.106.108","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.39.106.108']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6928"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced51c67-d198-5248-a8e8-f7b3ae5e4815","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 64.112.72.210","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '64.112.72.210']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6874"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b30f9b1-980a-5ee7-97aa-34e26d909288","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.66","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6835"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87d3ecb-0561-56aa-8ce9-b714ba9ae37d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 212.70.149.42","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '212.70.149.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6799"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--891d52de-dbe0-5f4e-84d8-ecfe0a109ed7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.134.144.119","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.134.144.119']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6709"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c5f96fa-e807-524f-9a84-ddaba0f277b6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.30","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6537"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0517d355-6b68-52aa-9618-2a28ae65b321","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 179.60.147.157","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.60.147.157']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6536"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e66d650-8e90-5bde-893a-9be673cb06be","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.80","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6494"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48b2a991-8b7d-5483-915e-3ec150a58692","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 195.133.20.253","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '195.133.20.253']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6438"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c01d66-e06a-5f76-8ca8-f16407c8eb59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.27","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.27']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6417"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7932a01d-b16f-5e6c-a16a-2f9f7943d71a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.38","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.38']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6380"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a5facbb-f607-510e-a1d6-97a0302d458e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 179.43.177.242","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '179.43.177.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6350"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a32853b3-af80-526f-9a9c-8615062b13a9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.81.68.101","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.81.68.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6327"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6913a748-289f-56ef-bfc6-783bb783ab16","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 97.85.120.211","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '97.85.120.211']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6124"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28fc7a3f-aaf3-572a-8ce1-2cb5e2cbcefb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.167","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.167']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:6103"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b497176-1e9b-5529-b040-cec292f6d5d7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 5.189.157.90","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.189.157.90']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5956"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d7b760b-9b6a-57c0-b6a2-2137507d17c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 91.240.118.245","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '91.240.118.245']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5916"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff503bb-840b-521c-9ed7-ac59fef7752d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.28","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.28']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5891"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d3a0dae-b6ac-53f4-810e-8fe7a4bc4731","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 80.66.77.236","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.66.77.236']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5838"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1e0f2c3-817d-58f6-b5c4-1e66c4810f26","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.227.254.54","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.227.254.54']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5830"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c080c54f-4cfd-5575-95e1-71c0421e2a27","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 171.22.30.173","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '171.22.30.173']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5812"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10eae02f-068b-5e5c-96fe-d56f734617df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.41","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.41']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5803"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93ee2a45-ff74-5b5c-9507-70dee0e4c273","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.80","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5727"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd56347a-e82a-5e68-8423-a74228ba4a18","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.79","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.79']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5689"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9edceca-9b10-5aa1-9f8c-63cbbfe75e38","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 92.255.85.173","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '92.255.85.173']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5675"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f78df72f-af11-519f-b1bc-1c666038e35b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.86","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.86']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5662"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--673fa2ec-e6f4-5ef9-baba-b2a793af79d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.83","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.83']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5659"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cc4b0a6-10d9-5701-b6cb-410d41bb6474","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 185.81.68.102","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '185.81.68.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5635"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6de7531-cc6d-5dba-ba1a-3e941ce1ecab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.89","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5623"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8be03ca-fbe0-5a6e-8310-911abad49f1c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 200.10.10.127","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '200.10.10.127']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5619"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5880847-384c-5958-a27c-23be33e3f94b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.91","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.91']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5614"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8de636ec-95f5-5850-aaee-9d9c008c8cfd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.109","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.109']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5605"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--426fd2fd-a6bd-5ce8-8e6c-e1ae684775b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.87","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.87']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5605"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--996cbb07-4173-5868-92e3-890501d53b13","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 45.93.16.71","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '45.93.16.71']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5596"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3d4b1bc-b1bd-5c2a-a5ef-955dd8fabe27","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.88","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.88']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5592"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18019851-c9a9-528b-ab1e-7b11f849be21","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.81","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.81']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5588"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1f17e68-a389-5e57-8b38-22eba442a4ee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.110","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.110']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5567"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab9e1534-4b19-512a-9716-fc71246d6f24","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.85","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.85']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5560"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54ad3919-18d3-587f-a947-ef8114bb9e4f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.82","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.82']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5546"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97e6f0a-e3f2-5f4f-b945-246f5d7ab805","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.84","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.84']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5540"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d15ce4d-5b17-5b29-afbf-c2db2e59b8b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.105","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5534"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8614dd7a-bb0d-5173-bed2-cb50e3a7f3d9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.100","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5524"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d993b77c-c861-5ef3-92e1-fd7076542986","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.111","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.111']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5516"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2656f05-1eb9-59b8-a2a1-6f8759fd4e0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.97","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.97']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5498"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--497a1a3d-c9db-55ad-b794-c5e1c53f8a28","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.112","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.112']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5481"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce1861b5-d51d-5863-a89f-6ca54f994fc1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.20","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5464"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2400eed2-9bce-5d46-8697-887be8493aae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.95","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.95']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5451"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e4c24b7-4485-5931-b745-f7e674058c4a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.3","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5451"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a566178-74b1-5890-8003-d3017bc372a9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 61.177.173.3","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '61.177.173.3']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5436"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf5e70b-c1d6-5864-adce-84699999e1c0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 138.197.32.34","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.197.32.34']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5425"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--532d537f-53ae-5820-90fe-658df43d5109","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.163.200","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.163.200']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5408"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03f38fd8-2e60-59ce-b762-ca853ef136ae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 176.111.174.98","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '176.111.174.98']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5378"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--298b23c9-2fc6-5eb1-ace9-80d2fea88cb0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 138.99.216.223","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '138.99.216.223']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5353"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b451407-3f11-56cb-b0ea-83c1906115c6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.5","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.5']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5322"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aeb7c61-8a20-5cda-b572-e2cd0d3e3d08","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 5.188.206.18","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '5.188.206.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5253"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf89a7da-b186-5fa4-b67e-7d48ce3b8d29","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.46","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5239"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--951735df-145a-559e-b2c0-ed2a62d094cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 61.177.172.19","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '61.177.172.19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5143"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64275b03-8b80-5b0a-ad18-b805b4ce6040","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 89.248.165.197","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '89.248.165.197']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5129"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3566968-c04f-529c-9d57-4012910ac235","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.49","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5124"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--060c6343-3fb0-5418-ae2c-5b171346b63e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 94.102.61.2","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '94.102.61.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5098"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96db0e42-fc36-570e-843d-60b1772a8e00","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 78.128.113.102","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '78.128.113.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5052"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50dbc868-a95c-566c-a16e-2dadb273e83c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 70.77.3.137","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '70.77.3.137']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:5049"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c668490f-9fb1-58ce-aad5-2d5d750c6285","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 80.82.77.234","description":"Aggregated from open source feeds. Score 52/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '80.82.77.234']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":52,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=mass_scanner","dshield","reports:4930"],"external_references":[{"source_name":"SANS ISC DShield","url":"https://isc.sans.edu/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a896606-67dc-5e8a-950a-377980ab289e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.212.225.99","description":"Aggregated from open source feeds. Score 42/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.212.225.99']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"GreenSnow","url":"https://greensnow.co/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47e2c5fe-2db0-5383-af68-ba4fa8286b18","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.10.134.138","description":"Aggregated from open source feeds. Score 42/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.10.134.138']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":42,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"GreenSnow","url":"https://greensnow.co/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13bd039f-f84f-5032-be96-03acb3b0e6b3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.172.236.241","description":"Aggregated from open source feeds. Score 42/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.172.236.241']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"GreenSnow","url":"https://greensnow.co/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fdcdd97-cd5c-5791-bb75-c2883759de59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.47.174.235","description":"Aggregated from open source feeds. Score 42/100, 2 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.47.174.235']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":42,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"},{"source_name":"GreenSnow","url":"https://greensnow.co/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df886c71-0c2e-58bf-8259-d2be37c0beb6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.201.104.216","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.201.104.216']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98f9089c-fd6e-5072-84f8-e0c1bc6fadcc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.110.11.48","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.110.11.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dca74fc-5b09-53ad-8c99-843850b37062","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.189","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.189']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--838cedc4-e222-5540-900a-2c5d7e7d1afc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.12.50","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.12.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b25f72-c939-5d58-a680-e1dc2830ea35","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.38.3.107","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.38.3.107']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62cd9e86-2739-5149-b7a3-0f7a3ed5a001","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.48","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb632d69-495b-5650-a583-b0df3a024feb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.39.150","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.39.150']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f8ca249-61ef-5eb5-99b6-23f436a38717","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.130.63.6","description":"Aggregated from open source feeds. Score 40/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.130.63.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":40,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a26d5f1-daff-5825-868e-4f28a1ea5204","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.0.164.165","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.0.164.165']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2233b0b-592b-5879-ba92-b54bf0dc7e42","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.10.182.201","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.10.182.201']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa28fcc0-b8f8-551c-9e06-17c51e13baf0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.14.106.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.14.106.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--806fc8b2-ba19-53e4-8543-382bd6ac3afe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.14.165.193","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.14.165.193']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e51683-c541-527f-82f6-2f0a4b84e21a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.14.64.225","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.14.64.225']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4f2b770-e2dc-5f81-a7e6-8a0c9067d483","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.14.77.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.14.77.186']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f3123ac-610d-518a-b92a-70238013758f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.15.173.79","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.15.173.79']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3258960-135c-5b7e-835c-728d01448a13","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.162.197.67","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.162.197.67']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a68e8f67-6554-5cdd-b0e3-2794577ad218","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.162.247.182","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.162.247.182']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7bd5c21-6c24-5bd0-b04a-8c4d946483df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.169.210.90","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.169.210.90']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c80bd721-e731-5126-b242-d9c11f7f3dd8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.192.80.87","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.192.80.87']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50674e19-3881-5b7e-84cc-65deb34debba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.2.161.251","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.2.161.251']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7b02407-743a-584c-9170-32926d3ce73a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.20.143.87","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.20.143.87']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6463d23e-1aff-54f9-aff5-db991e6e963e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.20.163.233","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.20.163.233']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c188cf42-7f43-5c98-bd42-8173120ca276","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.20.175.122","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.20.175.122']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08362de2-b3c2-5cfb-9e8d-eac65790ca06","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.202.192.42","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.202.192.42']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f70003f-4ee1-5c0c-9763-6981f3d16787","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.203.174.102","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.203.174.102']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1d46f6-9662-5784-b921-fef0a46dba59","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.204.206.182","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.204.206.182']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bad135a-d996-5e58-9679-a7795a423e51","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.209.110.147","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.209.110.147']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb097d70-ac56-5b77-9c11-c58dcafb3da7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.214.117.218","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.214.117.218']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--476951d2-6d45-55bb-816a-a13a7ac74727","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.214.197.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.214.197.163']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff60a144-39d2-5d76-a476-1981ee918485","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.214.214.114","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.214.214.114']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8163557-12c5-5070-a557-82f0f0d853f9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.214.42.172","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.214.42.172']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59659e15-058a-5b70-bda2-6cc8a760ec7e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.222.42.237","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.222.42.237']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c82f6233-cf22-508e-aa16-f08a051429de","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.227.228.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.227.228.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a0ca11-c46f-5fe9-a0c6-a26a0f0447c6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.234.20.61","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.234.20.61']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0675c8-a5b5-5622-83d5-e8eb65f00b1b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.234.234.57","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.234.234.57']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfcc7ff8-ca6d-5b7c-94a2-cde710b14acb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.234.27.159","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.234.27.159']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b953abf-0709-5f9c-a142-df184d264a19","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.235.192.214","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.235.192.214']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52615cc8-95c6-52da-8e19-8738f7ae970c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.237.155.150","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.237.155.150']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38f491cc-7e10-5687-9ad6-4ca06b4e5a8e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.237.156.72","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.237.156.72']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bab178e9-3d5c-5570-a18b-61d23e8f50ca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.237.74.84","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.237.74.84']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0590feb-bf0e-5e02-98f9-444be571f44f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.238.106.229","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.238.106.229']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e356a10-4f7d-5b81-9be3-80180e9eccb9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.241.24.154","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.241.24.154']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac93c9cb-7c34-564f-97f5-fd4d5078e98d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.243.129.33","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.243.129.33']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d86b240-bf1f-525c-b96d-5c12a52b431f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.243.244.112","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.243.244.112']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33bfdb61-2210-54f6-84b5-389b64b1a931","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.247.245.61","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.247.245.61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0f470db-d2dc-549f-9334-a826088d4c69","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.250.67.114","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.250.67.114']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0878ad68-7cd2-5996-9efd-4eba4aa11e23","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.250.67.190","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.250.67.190']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9579c252-4d86-56d1-80e9-e5f80f913dbc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.251.80.19","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.251.80.19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b1c6eda-fc27-5193-b023-5d24c9707d1e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.255.171.167","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.255.171.167']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--441dbd26-5edc-520f-9545-17d5da15113b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.32.207.234","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.32.207.234']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f5de522-e732-5d83-b3ec-3614b7f9d0d9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.32.52.191","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.32.52.191']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0548a42b-d991-5937-bbcf-9cd9e2b13f49","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.38.220.207","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.38.220.207']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da95a164-81b8-5ba4-a258-427b3e95b403","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.53.239.173","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.53.239.173']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50d11752-2237-5f79-bec8-3c1f204e5949","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.53.61.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.53.61.36']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ea7b46c-c05e-50d6-8b4f-c682cdaa9cbf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.54.206.31","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.54.206.31']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7be98bae-ff53-5c8f-9690-1bc0d8475c59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.85.42.195","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.85.42.195']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c56b2be-ae26-5e84-93bb-d2e1eadb7c89","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.86.233.5","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.86.233.5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80b07782-aee2-5fe0-a52f-10b6780805c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.92.121.6","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.92.121.6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ffb365-fe5f-5a8c-bc05-c20dc3f4e802","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.92.159.64","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.92.159.64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b54a097a-863a-5d0a-9a45-416a559b8f79","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.95.155.126","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.95.155.126']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b447137d-4fd1-5e8b-be7c-24b33982298e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.95.172.30","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.95.172.30']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--680fa8bf-06e1-52eb-8067-36b322f719ff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 1.95.91.114","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '1.95.91.114']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b69b259e-97fa-5ace-b04f-c70e751d9221","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 100.53.85.177","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '100.53.85.177']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb8d45b8-dddc-52c3-b5cd-fddc5efa9689","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 100.54.149.28","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '100.54.149.28']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca75a37c-1200-52be-806e-d1601659f04f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 100.55.48.57","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '100.55.48.57']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f53b8227-e85b-5d99-96c3-bcb5777dd7df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.100.194.181","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.100.194.181']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63af08be-99a9-52dc-84ce-c1d077db65bf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.11.137","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.11.137']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e41606d-2a3f-5ea1-9be6-08f571e0367b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.129.127","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.129.127']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5800928-4ca5-5976-ba4d-1551b8499c14","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.130.208","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.130.208']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c36b2fe-e2e3-5288-8f30-c02731cc01bc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.130.65","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.130.65']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09adab5c-632a-599e-aef5-92a58bb3066c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.141.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.141.163']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6cf365f-27a9-5509-916c-9b5ba5a22d80","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.141.180","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.141.180']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af54d15b-496f-5f4a-a881-f8b955751325","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.143.152","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.143.152']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdb4fd57-c54c-5d76-afd1-1313d1e340b8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.155.86","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.155.86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d81da66-428f-51d3-87a1-2c51ece7e4df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.157.138","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.157.138']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4651263f-0cb2-5daa-8dc0-bbffe0f4ad3f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.22.12","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.22.12']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f66684-215e-5086-948f-b1757c527684","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.23.159","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.23.159']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d97d4a10-5549-5dfb-920c-0c16eaf26df3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.24.58","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.24.58']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ca43649-1d19-50ea-9529-d4241dd472b5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.24.71","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.24.71']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b15b97-3675-56b8-b39f-4a98fb4aefe0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.26.93","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.26.93']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2f0a150-b589-59f0-ba33-856173c8782e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.4.10","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.4.10']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c70f795-7ee7-5836-9335-d877c6a5f154","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.4.240","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.4.240']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b903b76-071c-5581-9fa3-a1094211b6c8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.46.108","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.46.108']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--854cd58e-6f5e-5776-9063-971856ec864d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.53.14","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.53.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32097963-3212-59e0-b7a8-2d8bd5612f56","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.54.245","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.54.245']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4619a3a-154f-5c53-abf1-1582d926cba2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.54.66","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.54.66']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da498ab8-d949-509a-922c-b44638c570c2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.54.95","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.54.95']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b059652-f340-5160-8eb5-161f09d6fe3c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.55.179","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.55.179']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f43270-4347-50c6-a995-03df441c825d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.55.63","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.55.63']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84a2d1f1-dd05-5b2d-9999-9ee43cbb3b2e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.64.76","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.64.76']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee1175c1-e060-510b-a6ba-b00fb73e9f25","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.66.30","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.66.30']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6b0dbe5-acbb-5c26-aa76-8da8812bd576","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.67.70","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.67.70']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3d2602-e723-5563-bd4b-3d77acd8babe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.68.11","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.68.11']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2c01fb-53b8-5aaa-845d-4a423175cbba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.71.100","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.71.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3f409b1-6334-53cf-9bf7-6838ed811b35","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.81.144","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.81.144']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5091079-a3b5-5b49-84ed-657a9fb71453","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.81.18","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.81.18']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b43093e-38a5-5c43-9121-d83d85213e69","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.82.218","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.82.218']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--660443ff-66f0-58fa-9869-84b1c28f3927","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.126.91.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.126.91.34']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aea9f1cc-6d5d-5447-be69-0c9ad670dc0c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.2.183","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.2.183']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e5d6b2c-893d-50ba-932b-004afd986e0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.3.167","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.3.167']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c0bdcab-646d-50de-89f6-ffb8f251c73a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.4.119","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.4.119']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f23917-5a60-5c2c-a77d-17d86a2b6fee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.4.122","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.4.122']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5af61999-1344-5a6c-a794-6894dad41595","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.4.124","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.4.124']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--661072b9-8749-5c76-bda4-27232d1eb307","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.4.128","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.4.128']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1db013-8cb1-5299-b90c-61584ed716ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.195","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.195']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7758e51d-3d75-5542-aeae-7e1f34f3e0dc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.26","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.26']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6468d3ed-11ea-5fde-8de2-18b8461882b3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.32","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff8b69ef-d529-58e7-90f5-092a57a617d2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.33","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.33']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7088c86b-9c0b-5a48-9a05-d1884046bcad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.34']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78d533a9-801e-563a-bff8-4f7c7f7ad896","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.39","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.39']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91beccb2-dfe9-5853-b2c6-2ef0e4da92ac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.49","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cddc573-a564-58c9-8288-a64ff8c75fcb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.50","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1100122d-cde6-58c5-87a6-971648c23d59","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.5.63","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.5.63']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7f9b04a-ea8e-5390-a8b7-880916eb3f12","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.6.86","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.6.86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eafef63-a0c8-55c0-82e0-296f855d10f7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.13.6.91","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.13.6.91']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d55f3ca-4978-5410-816f-41652c21a046","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.132.248.251","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.132.248.251']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0347b417-53cd-594d-926f-5cf79fa496f6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.133.170.17","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.133.170.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--342e8f2f-8ebd-5dde-b81a-11c06e9e1968","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.168.18.254","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.168.18.254']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7531246-7d0e-5047-9ffe-eeb87258fd9e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.1.98","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.1.98']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d23c5860-5597-57f9-8a01-4e0c8d58780d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.182.12","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.182.12']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42e0ec08-84f0-53a3-b415-ac6a9ef77cb5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.221.177","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.221.177']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61743e6a-03fd-58f1-8b83-2ce0e46cc943","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.48.48","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.48.48']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1f7641-1f37-503f-b0af-bf0068c6fc40","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.52.133","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.52.133']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78ca831e-f6d8-56c9-8649-c4789a7d2fc9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.89.8","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.89.8']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7528984-5b46-5114-bfe2-067925f55748","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.200.91.177","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.200.91.177']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff91c41d-54f1-57b7-a312-e1d0bdf37875","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.201.226.38","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.201.226.38']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--089a4682-5983-57ef-9389-678beba19ea2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.201.67.225","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.201.67.225']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98c46fd6-d33e-5a68-b2bb-b3207b99f6d5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.205.122.213","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.205.122.213']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e4594b4-36d8-52b8-8b7a-edd5cf4ec8cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.206.107.245","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.206.107.245']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0027a32a-e7eb-5d3d-897c-a94b983be0d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.206.211.72","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.206.211.72']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e96968b-5901-5220-8229-3a1bf1f602af","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.227.203.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.227.203.162']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d49d5cb6-1ddb-5605-905b-40b64e351131","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.227.52.175","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.227.52.175']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--241394e1-6afd-51a4-9668-2d13aca15b6c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.230.144.128","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.230.144.128']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5297b1f-213e-5a33-ac40-44205ee0ee9f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.251.197.46","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.251.197.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0df3facc-bf5c-5c35-b8b2-240349361ac0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.255.105.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.255.105.34']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7188ba9d-4ded-53cb-815d-f3dda8b64fcb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.26.42.109","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.26.42.109']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d775285a-8cad-5231-a9ca-424580c8c663","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.1.25","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.1.25']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--929bd87d-8401-546e-a600-4db99361d5f2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.128.193","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.128.193']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--415babad-0167-58b1-bdbc-e12440726f9f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.145.199","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.145.199']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80e8010b-9382-5ac6-bce7-865083a59fcf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.170.173","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.170.173']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0701ff2c-1989-5dc0-a547-dceb0f2bd8ca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.191.177","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.191.177']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b4ba84a-6291-5682-84e7-b3a645a2e8c1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.240.31","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.240.31']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c17ad72-a53b-5661-a9b3-3b32a31dd269","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.243.200","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.243.200']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e577df7-8fb2-51be-8660-f2f5436de85a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.244.206","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.244.206']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a903a0c-6e87-5e40-a07e-d4b341add33a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.32.251.22","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.32.251.22']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e535ba0c-5907-55f4-b7b5-41781b1096a6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.33.55.172","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.33.55.172']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e2975ec-a3fc-520f-8249-fdd719ee4002","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.33.68.177","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.33.68.177']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--328a9b75-25d3-57bf-acd4-706e7ea72590","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.34.229.53","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.34.229.53']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d1271fa-a1df-594b-99c8-aa25f01f011b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.34.249.202","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.34.249.202']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48219ec4-4ad0-590e-a654-dbedf9b18b27","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.34.54.16","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.34.54.16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c70b270a-1c62-5dc7-b19e-9c92e729a1a3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.34.55.202","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.34.55.202']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c88f925-d73d-522f-b0d1-93c08ba7b3bb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.34.59.249","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.34.59.249']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf82fe24-f1da-5537-bfcd-a98e89763752","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.34.76.191","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.34.76.191']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fec1216-136e-5710-b1d1-81bde3ba98b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.35.232.236","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.35.232.236']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0b1bb91-3ec3-5edd-bcc3-ba9563167b74","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.35.241.45","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.35.241.45']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a66bbc78-a0e1-5230-8477-769b15e864bd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.35.248.174","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.35.248.174']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b930673b-64ba-5e1d-8989-32ecb6dcf48c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.35.52.129","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.35.52.129']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4d2084b-5f33-5dda-8eb7-d1e09781b602","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.35.91.147","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.35.91.147']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb74213-442d-58b7-870f-42ce3e251ffc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.104.242","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.104.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ffedc8-d235-5367-906c-4acf28ac8d52","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.106.145","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.106.145']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8dba5083-b815-5b2d-96c4-7b8721f9e72a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.106.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.106.162']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9bddfc2-f760-5263-8767-27795eb55382","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.107.233","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.107.233']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88666dba-a2d4-5414-8763-2eeae8eb89d4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.108.213","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.108.213']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cb7b72a-d3a8-5bf7-82b8-663a444c0296","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.109.176","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.109.176']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b42c7a4-b421-5b28-b282-479ab270db1e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.111.119","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.111.119']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--885ddffd-d60b-54f1-b562-f85ea1a2a06a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.111.155","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.111.155']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e305fc69-a1b8-5926-b262-d46411e4ada8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.111.86","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.111.86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3772af03-c544-5668-9731-60569dad024f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.116.232","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.116.232']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eaa1ad34-86b5-5d38-bd22-36bec34e5a46","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.117.234","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.117.234']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e754fd67-34b6-57d6-9e5b-06462f9e2cff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.117.42","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.117.42']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f4fe2a2-e8c9-5f2b-be53-1fe6ffc0476b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.119.203","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.119.203']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b4cd10a-f5b3-565f-904f-f1ed06ed2504","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.122.139","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.122.139']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c19f47f-1f4d-5662-a8ed-a16434f95bd2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.122.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.122.186']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f9be49a-f154-53a6-9ec4-0bb0b3e55935","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.122.190","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.122.190']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9541623a-da0e-529f-af9c-1bb191e96253","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.124.127","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.124.127']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad715174-f943-51ad-bb6b-b148bc531a7d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.125.72","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.125.72']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0516c0a1-12c4-5d2d-8d93-26b1c717dc38","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.127.86","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.127.86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d3d7958-d648-5395-a168-f853ebe1d9d1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.36.228.201","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.36.228.201']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e18958c-8284-545c-9e5c-4dc2b8d8b457","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.37.158.128","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.37.158.128']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24a89181-8226-55cb-bd9a-4e3efa1d4fcd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.37.22.103","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.37.22.103']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9801616-2417-5247-a60e-64ac826faba2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.42.11.47","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.42.11.47']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1462bb86-adb0-5842-a158-7cdd04685a02","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.42.158.179","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.42.158.179']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df3e1708-a55c-5e76-b8d4-6075ac196fc5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.42.41.164","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.42.41.164']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98aa1492-b30d-5cd2-909f-70be6e2fbd17","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.43.170.39","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.43.170.39']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f5f04b-5a60-50ec-9b10-f66d41e37bab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.43.171.225","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.43.171.225']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb2be82f-e7f8-5503-b72a-4fad04d31a33","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.43.5.148","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.43.5.148']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f08efeda-55cf-54c0-a661-ae21a1dc9722","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.43.58.16","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.43.58.16']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54929f28-ef49-5d80-b36a-4d3517cae2a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.43.77.161","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.43.77.161']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42121f70-ff91-57f0-9529-b5d905ea215d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.43.86.204","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.43.86.204']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af81f2d7-831d-5088-a169-a90d6f7f04cc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.134.74","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.134.74']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--046cf43b-77f3-5390-b6de-8a911a67fe80","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.14.46","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.14.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70992985-0638-5e89-b5b1-e6aa0b8d164d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.142.49","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.142.49']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a763efc-a795-552a-a72e-a30b93b308d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.143.205","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.143.205']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4035fa0c-2ace-5e6f-9a8f-3273584f84e9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.15.119","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.15.119']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b8c26c3-71ae-58a3-9e35-504a1c7e355e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.15.26","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.15.26']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0fc34f6-0ee6-5eb5-8f9d-3928d37fa63a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.152.216","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.152.216']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9833126-04d5-5f4d-b3c5-7785cf5dec34","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.155.9","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.155.9']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85fe56c9-759d-59fa-be72-7651fd487898","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.156.170","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.156.170']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29077d55-6fa9-5aa2-8b7a-ba75a90e33ec","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.156.21","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.156.21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c08de34-53e2-55cb-847d-a8fdbba95d77","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.158.137","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.158.137']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61914f4-4f12-5938-b433-8ff1c97d3cb6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.158.56","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.158.56']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea31a8e2-6fdc-5910-b62d-b884aab7cd7f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.159.125","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.159.125']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84534b09-c55d-5ac7-89da-d9db96194ac3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.159.50","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.159.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c37a9c91-b9bc-5e73-a665-fe46c6d4f4b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.163.225","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.163.225']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c08b69a7-4a93-5d05-86bf-55f71179267d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.18.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.18.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--824eb33f-e463-54a4-b1bb-4fdcddbad725","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.19.128","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.19.128']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa520ecc-2ba9-5d44-835f-1771ce5226d1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.27.73","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.27.73']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04381ae1-03ed-535b-a9cd-37e7600ebe34","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.8.187","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.8.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f602f423-9f7d-56e8-998b-b7ad23f4d4db","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.8.188","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.8.188']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be4bdaff-046b-5138-bf08-4d9369762ad1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.47.8.43","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.47.8.43']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ab23287a-1ce7-5a38-aa14-3f289af49fdf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.50.83.146","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.50.83.146']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e66a7ce4-a54d-504a-9d40-5c580cb10432","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.53.236.155","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.53.236.155']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd62b635-0c57-556e-aa11-496b931191d5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.53.248.234","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.53.248.234']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76233a5a-2fa1-5150-9534-87643fde7d66","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.68.5.93","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.68.5.93']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0b943fe-dc78-5e71-a14e-5ee8c847cf5f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.69.180.187","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.69.180.187']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb2c5f49-8a4e-51cd-bb7c-572755b982e3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.76.248.214","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.76.248.214']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64a9b7b8-65de-5d33-8e60-a777c331ddda","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.79.165.132","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.79.165.132']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--435bc88a-250a-5c25-97f0-458fb32258a2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.79.165.43","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.79.165.43']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af84d97-b732-58c9-ae6a-70f515f4bc83","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.79.165.65","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.79.165.65']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--045c1c65-429c-53d1-ad2b-d7872a74664c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.79.167.192","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.79.167.192']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdb46123-0c6e-5d92-be5e-6631ec932114","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.79.23.38","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.79.23.38']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a96a9a6b-1571-53c5-afbc-a67c698bddac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.89.141.184","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.89.141.184']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54614aa4-1799-51ec-8f91-9c7712fbd3a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.89.148.7","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.89.148.7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8156bfa2-d79e-556f-82a8-90d4135c737e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.89.182.189","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.89.182.189']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90421802-8a86-5050-8771-925fc590c653","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.89.76.249","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.89.76.249']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16d588a4-655c-5c05-9935-27b5a24f2a3c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.91.114.194","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.91.114.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cffd4d1-57f7-554a-84ad-d8c59d48112a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.91.126.150","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.91.126.150']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8437f35-196b-5313-ad0a-e2a7bc98c983","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.91.192.9","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.91.192.9']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f8512b1-6ed4-5c05-a24c-0624084d31b3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.101.200","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.101.200']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96864a01-2f1f-5cc0-a4ac-8046c1d675ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.192.183","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.192.183']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5808e84-cf28-5400-8822-dd10d3450926","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.192.184","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.192.184']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0811f0cb-8628-528c-b12b-12b4c83f104f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.192.231","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.192.231']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6650ced9-fa86-583a-bc92-754ea52f71cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.192.45","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.192.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e68c3a3-40d2-5207-b910-21532371bdd5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.192.88","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.192.88']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e00f9e43-5889-5b83-a77e-56439daf3e97","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.193.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.193.131']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3bfa53b-fd32-57ea-a92e-71a64f3c9cbd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.195.102","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.195.102']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31296e42-22db-5fbf-a935-482878933c4b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.195.17","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.195.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e070c73-f28d-516c-9ffe-19e96c8e920f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.195.253","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.195.253']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4faab487-f806-5c3a-90da-e0e90c210b56","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.195.62","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.195.62']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89f900fb-e711-5c6a-a355-433748ba3fff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.197.182","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.197.182']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83c44c89-440b-58f1-9e80-f9d7942bf6fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.199.188","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.199.188']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79174780-cb4a-5fc0-ab77-d90651197db7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.199.69","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.199.69']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc7b4cc-2fad-5aed-a692-7076fe391b64","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.200.105","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.200.105']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4d4ab80-a481-519b-9c2f-343ebb4848b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.200.56","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.200.56']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27829191-60e5-5c82-98fc-95f2821d10ea","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.200.79","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.200.79']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--479149da-f867-539a-999d-ce010872cd1d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.202.144","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.202.144']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--634084ce-ed26-5b5b-9634-f5769ec11f67","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.202.177","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.202.177']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22ffe502-f8b1-52b6-84bb-446e332e63f5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.202.189","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.202.189']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58e24658-3d57-5606-a670-950c089d0efe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.202.48","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.202.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4faa8234-5209-5e9f-aa4a-c5725e0f54f6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.203.52","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.203.52']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0696b76-00ca-50bf-9138-46c5566cce7d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.208.174","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.208.174']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f4e0f93-624b-54e9-8955-c8f42e8408d9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.214.98","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.214.98']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70a2ec2d-094d-5d70-a939-3fddb2ce9bd5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.220.237","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.220.237']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d9e7360-a1d2-5595-a460-1267dcf81742","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.221.200","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.221.200']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b95ba967-e0d9-5524-9451-852eaf84f486","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.221.207","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.221.207']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--894c528f-9472-5c5d-9b03-8e139e533566","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.229.2","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.229.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10682dad-777a-5699-ac3a-69c295580037","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.96.230.94","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.96.230.94']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be730f8a-4cd0-5d62-bad8-7b92c287dbd1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 101.99.37.80","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '101.99.37.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b692b4-00cf-5a27-9329-79ee6259feb1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.0.0.14","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.0.0.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ccbae7-0382-5699-a383-4db08556c91b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.110.11.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.110.11.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a028e9b6-1e65-554c-a1ca-2a2e24caee72","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.110.7.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.110.7.34']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60db9afc-b590-58bf-ba1c-d2131c52a4d8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.110.7.41","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.110.7.41']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80cd2d7c-1c37-5060-a1db-4ccfefed8e40","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.117.25.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.117.25.131']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63a97feb-bea6-5977-8d78-345443d7b593","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.147.192","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.147.192']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ebaf664-4a2f-5430-96fd-d02f271900c4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.50.1","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.50.1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1aecf422-6865-5d91-91d4-2662590dfdfd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.50.232","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.50.232']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c53a5d8f-e5f6-5441-855a-91ae86a569da","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.50.248","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.50.248']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--173704f5-10f0-5d79-b9bc-13286187b9e9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.131']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70b0986d-988c-5a3a-bd5e-563e41387ce2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.163']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ddc6be20-d0f3-5525-b103-8730cc1ea9ae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.185","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.185']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12449bcb-4bf4-5dad-85c0-fc4492381d82","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.2","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.2']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89463627-39b6-5a68-9d27-87ca8a0098dc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.247","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.247']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be290cea-3e97-5a40-8823-3a222f0b73fb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67296e2a-ef7b-5167-8946-28f9757471de","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.51.63","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.51.63']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf9a02a-ecc9-5105-9cf5-61bce069b16f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.52.113","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.52.113']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--155023cc-3b53-5cb8-a182-5be4f7f6b953","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.52.16","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.52.16']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--594d7869-a992-5490-a99c-19e14f4d5874","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.52.167","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.52.167']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e0cc4d6-a9f6-5c35-a0d9-2bfd564f07b8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.52.198","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.52.198']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e1ebe3a-dcea-5bd4-8a4a-4d3e15ecd86a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.52.248","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.52.248']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6524ca6a-17a5-5fc6-b16d-bf9420b8b850","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.11","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.11']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e55930d9-91da-54ec-8d45-bec306979e8f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.125","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.125']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0636ed98-5868-5045-b61c-2b9a1ed8ecfd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.156","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.156']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--953ebbc0-cafe-5c3d-81ad-900a12d6936f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.167","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.167']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23fbdc22-d1f2-5ec4-974c-d5fc74703fd4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.168","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.168']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--395c38f4-e6a1-5985-beb9-b20d3bb4a1ef","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.186']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced48899-8540-5d46-bd5c-1660f439e6b5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.196","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.196']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--694d2c96-befd-5ca3-ad65-84e204c35a30","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.220","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.220']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eeeb0991-f139-5095-b67e-964d044a8c3a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.243","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.243']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f859b691-ab1b-5d98-bbd1-c603c836c666","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.25","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.25']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c3b2c8-47b7-5111-bad7-fa7913ab6fda","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.53.50","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.53.50']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8343d703-bf6d-5946-9e51-b7f985051a9c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.119","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.119']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--349ecc13-d94f-5be1-b899-667e97f7c85d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.126","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.126']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae99f96-e34e-5143-8e01-badb6c9bef0e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.15","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.15']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c45b521-0f5d-55e0-a4c5-c0c10d367539","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.181","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.181']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b524f1e2-7f0e-59ca-ac47-400971dc7efc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.236","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.236']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--37547d30-ac49-5b90-9438-21bb32f56407","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.54.89","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.54.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8578a91-1983-5281-a7ba-5d7de23639a9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.105","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07334674-13ad-52d3-99e8-aa58d566ea0b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.137","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.137']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c782de3-05d2-5a09-aea7-b3879982c110","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.164","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.164']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--401eec69-ec99-525c-a8e2-bb0a86af13df","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.197","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.197']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b1d87f2-8b4c-545b-8288-6d1f6f7c9f26","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.5","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.5']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27317abd-4f81-5522-a22a-193ca38fa44d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.73","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.73']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07e44516-1e0d-5ded-b7d6-ebe2a3d27747","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.55.76","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.55.76']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--064fc7b3-1fda-5ec2-a125-df4a2ead045a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.134","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.134']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9c29b51-ab71-5e2b-9e98-74b5973abaac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.151","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.151']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2735ebd9-1950-5b2c-9c3d-bf775d1099d2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.162']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1d4ddb1-e912-557b-8fc8-c4a0de8d7b94","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.171","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.171']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05dba586-dcb0-5963-84ec-1da8b5179808","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.192","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.192']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--772148f0-4016-506e-954b-0a62089a9ad3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.2","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.2']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41737631-fdc5-5165-aa43-d7bc171bd511","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.254","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.254']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed44d60d-8166-52d7-968f-7c2f4966eafd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.35","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dcab742-c023-5d70-abf7-31e90acea135","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.56.78","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.56.78']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b435a285-2b0b-52d7-a289-cb1b90a17857","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.57.122","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.57.122']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41d53404-3914-5fa6-8ac3-c31ad43f04cc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.57.254","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.57.254']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6c4f8b1-06ec-556e-b238-21d37934b88d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.57.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.57.34']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c7c7d24-d48f-5da4-a494-33f9590ca33e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.57.58","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.57.58']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b8c34ec-0cef-5f97-a2dc-c71260092a2c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.57.70","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.57.70']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6701e81-b1aa-5fb0-a9c4-ff15a9cb915d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.59.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.59.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03a968a3-140c-546c-9098-15efdc4b9b2e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.59.194","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.59.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83d1ff81-7532-5cd9-9dcc-28215f0f32b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.59.220","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.59.220']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--639747cd-f607-588e-a25a-a6f12286ec33","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.59.240","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.59.240']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab60df1-bf99-565b-8da0-699e5a53669d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.59.27","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.59.27']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--091381a7-ea13-5cca-b909-ef0b05a81fff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.59.32","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.59.32']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c02d6be4-3e34-5c37-891d-feb8c8449cd4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.60.1","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.60.1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--181a58c3-fbcd-52fe-961e-52c5f78a97d5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.60.11","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.60.11']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d876043b-6d63-56ba-866f-70b2a3e25aff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.60.13","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.60.13']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0a2a909-75f0-548f-83bb-1d77829c79e4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.60.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.60.186']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--441ac81b-78c8-57ca-8f6d-80f38d594284","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.60.31","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.60.31']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--863c07a2-9920-5dc3-b47c-5fc3b222a96b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.60.66","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.60.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d2c7787-173a-57b5-a915-e67103b93178","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.180","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.180']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e50217a0-c133-5173-b449-9ca0ecd607b6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.189","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.189']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02a90854-2ab3-5963-98bc-69ece4bc4d26","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.209","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.209']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--616f06d6-a909-57e8-86c9-8e68a330c013","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.230","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.230']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--800f55cb-53ed-5ad9-a28d-b59d42704e5e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.233","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.233']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce9012d-f478-5233-9dd0-84f20ccdae02","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.30","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--815b8dc3-0c65-548f-a18f-a05d0c98ec44","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.49","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.49']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--949f5f3b-2a83-5e8b-8e20-c9cfff7da206","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.56","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.56']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c6e1737-c4d0-5893-a6d0-530fef2fcdcf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.64","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe5d5aa9-fcea-599d-95fb-b2bd9a9012ec","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.61.89","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.61.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9a8b8d-c628-50ee-83e9-54343b5c746f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.123","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.123']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbd3231a-9e4c-544d-b17f-3032649aea61","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.144","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.144']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a21e43b0-fd35-56c4-88ce-f5ca5e7273e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.178","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.178']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd62c014-3248-5fa0-ad75-bbc04001a1c4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.193","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.193']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0541f94-591e-5780-a6e7-573545b14865","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.194","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.194']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90cac21d-8a79-5c2f-9ce5-e6f18a4181f1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.216","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.216']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be3b73ca-af90-54d6-82bb-51205a67c2a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.222","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.222']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3523c788-ed39-59f9-a3b4-bf48de18fc0d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.59","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.59']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25725a98-2767-5b4c-be2a-cb08498aece8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.68","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.68']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4702e27-452a-5974-ae60-2664b8233da0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.62.93","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.62.93']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f6088c7-5ada-5050-9420-9199dfbe9280","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.111","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.111']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c1675c-28a0-53cb-a14a-5b5993fb16ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.122","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.122']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--16ec9d0f-5980-536d-9d6a-bc761a6e2741","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.123","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.123']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f292be9b-8028-5b80-94e9-bdfe9215e471","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.126","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.126']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3b14e23-a7c6-5418-a109-d457928731e4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.140","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.140']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2498f533-2eb9-532b-9faa-3281bc478b4b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.15","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.15']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e558f024-b791-5329-9a89-02e479f28e23","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.63.242","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.63.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9344b8a-3618-5029-aada-a443c2beb17a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.81.21","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.81.21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f5ac005-592d-5ff7-9066-bde92fdc3941","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.129.81.85","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.129.81.85']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0570234-8ae5-5855-9ea4-142f674338f9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.140.97.134","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.140.97.134']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f0ce5d-cb43-523d-9741-159e67c46456","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.141.43.218","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.141.43.218']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f622e802-cc82-5e4c-a84f-30fe824c532f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.141.50.55","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.141.50.55']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db24f11e-c9ee-5162-af3b-264cdb5846fe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.141.51.164","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.141.51.164']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cb68051-a3d3-570d-884c-d80ca86dd43c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.16.125.52","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.16.125.52']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--babaa5aa-f5f5-5744-9484-ea5e30d3f59e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.17.216.139","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.17.216.139']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--beed1a4b-83f2-5fd8-a62c-d1d054fb126c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.176.94.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.176.94.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bdf90ea-6ac7-5e66-ae77-5ea2ac426e7e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.180.220.10","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.180.220.10']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fff3db81-a5eb-56a6-b92c-df1e286c13cf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.182.241.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.182.241.186']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0de38d10-7208-5ff9-a3a0-9c93a222afb3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.182.241.48","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.182.241.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d790106b-42f8-5c5b-9ac2-e3d52b70d2b4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.182.68.207","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.182.68.207']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e2ac58-88ae-5f9a-92a9-755a99b0c2c3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.182.92.126","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.182.92.126']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87d79e55-17af-53ec-9603-e034e57a3d65","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.189.58.221","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.189.58.221']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e579f6b-3b22-5ae2-ad5a-149c320fecd8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.203.200.45","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.203.200.45']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df124b6a-4248-5719-b9cb-6900e16efcae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.203.41.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.203.41.162']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f949c2eb-b0f0-5295-86c9-163831fbb46d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.204.199.226","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.204.199.226']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--392bc1ee-bb88-597a-a34d-0587340cbc22","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.205.217.28","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.205.217.28']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66d9ad0c-480d-55ca-8196-799703b8108d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.206.113.255","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.206.113.255']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6fa09b-3462-54a8-ae91-e3c0c3d66306","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.206.222.35","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.206.222.35']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9332d5-22bf-5601-bae0-2c0bc74a312d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.208.185.39","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.208.185.39']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--022923fc-d5ef-5055-9964-9904ddfedf7d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.208.96.28","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.208.96.28']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34d18a93-9221-5d36-9373-0b48e6d3fba1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.209.119.140","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.209.119.140']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00a2c47f-7e75-5f87-9504-bcdc62086226","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.209.192.134","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.209.192.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5555fb6c-e3a8-5cc1-94c7-eafc32fb6aae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.125.66","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.125.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83497e48-2522-50b8-b0e8-6af6fbc64ff0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.146.231","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.146.231']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54b7d095-2245-5fac-ba4b-c39e29ce8005","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.148.41","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.148.41']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31c9e1fd-b27f-5c59-b196-585dcd0f9f83","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.148.92","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.148.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d23733d-f10f-541a-bd46-20f2f865215f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.149.105","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.149.105']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58031745-1a00-5c37-a034-f3d3518825e5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.149.236","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.149.236']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20c0cffb-2c47-5f12-8436-bcc9daa9ac9a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.210.82.20","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.210.82.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc2880a2-8a41-5633-baee-eed885f9e6fc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.211.147.73","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.211.147.73']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39860245-ac24-5af2-a82e-29c80c07215a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.211.152.138","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.211.152.138']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50cc074d-1459-5026-b04b-19c438293797","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.211.234.141","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.211.234.141']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ff90f64-06d6-55ad-992f-e77cca95f8c0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.211.7.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.211.7.162']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d66a56-0a78-5e80-ae8d-5e3e59865984","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.213.251.10","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.213.251.10']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72336f9a-a3a4-5050-915a-45cc296ede0c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.213.34.99","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.213.34.99']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c83d2d3f-811c-543d-901c-2db422f1e9e2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.213.9.78","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.213.9.78']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d75fff7-c991-51eb-80d0-a61b9370ede2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.214.138.174","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.214.138.174']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f547469-47a5-5ac1-aaaf-1241ee78ebc1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.215.34.112","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.215.34.112']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a11877e9-7510-506f-9a75-aaafae914153","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.203.228","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.203.228']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32feefe5-0b39-565a-a9a8-6e6f4c8c02c5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.203.245","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.203.245']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fb20b92-4a0b-5a71-acb1-0fa950ad0ffa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.203.253","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.203.253']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae596211-a732-5476-a2ee-294092935564","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.219.24","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.219.24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c5050cd-be69-564e-8a2d-a91f82fa0bc3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.236.218","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.236.218']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f9aa48f-d3ef-5c88-aacd-4268aed2341e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.237.30","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.237.30']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3b1727-636f-5e26-ba6a-00f0abbd0df8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.240.60","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.240.60']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2880dd20-2641-58da-8c6c-6f69c5eea8ef","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.240.61","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.240.61']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9508c0a-1cee-5c26-b052-a8f2c59acd49","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.253.47","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.253.47']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--741f2e7d-8e66-5e0c-924b-2cafacbae36d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.216.27.83","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.216.27.83']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38d225a9-4858-5c4d-abe8-d10a72e80815","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.218.89.110","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.218.89.110']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cc56f93-63d3-54fa-b60c-0ca7abbb1475","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.219.126.124","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.219.126.124']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f063948-0953-520a-bfa3-4c57db8e6e62","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.219.163.144","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.219.163.144']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e455a5cf-6a4c-55db-b1a8-040a161563be","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.219.170.37","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.219.170.37']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56a09f9e-5571-5331-9ac7-102ccc3ced19","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.219.201.67","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.219.201.67']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edbf3f39-89c0-503c-a05c-ec2b8cc1eb84","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.219.210.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.219.210.186']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c92aa7e2-06ff-5f40-a6ad-8b89a8ea35ba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.22.217.76","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.22.217.76']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b6cb323-4473-576e-92f3-57e12b2e8374","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.151.89","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.151.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c5568b-83d8-5f91-862b-f4b5f07715b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.148","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.148']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0bd24cf-6d6a-5173-91f5-b6ac8739c5c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.184","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.184']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f39c9d14-8f4d-50fd-9846-1edb471c3872","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.239","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.239']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76cad35b-18e7-5e64-9fb2-dac84c23aa42","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.29","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.29']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02c5709d-8715-5bf0-b69f-7a6b9392878f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.39","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.39']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dacd36f9-c621-5804-bc28-501715346bd8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.41","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.41']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49e89c37-bb91-539c-9869-ea5ceb698109","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.47","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.47']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a70d69fb-63f5-5795-958e-7d714d3eed42","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.63","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.63']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57aab47c-98a8-58de-932c-8086538904c8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.160.67","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.160.67']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21b5e928-fee8-5590-9957-432a92db38e2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.220.85.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.220.85.131']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1bd874c-13d6-5363-96bd-6efbaf45703c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.221.220.181","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.221.220.181']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6be4a876-1fdb-50e4-8381-a4ec3932a25b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.222.132.206","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.222.132.206']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a186f939-9221-531d-a783-2a84cec46996","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.222.172.45","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.222.172.45']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbfe3b19-42cb-54e6-aa48-3a86381efbfd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.223.58.241","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.223.58.241']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec1de2b6-a76a-5fac-b886-059829e47b83","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.223.92.101","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.223.92.101']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f55fc85-cc6e-53a2-946f-106fe7806545","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.23.122.235","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.23.122.235']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb511045-83b9-55fb-b11c-bf7e88c43c33","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.23.172.145","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.23.172.145']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d453e6b-0c4f-59da-ad2a-f6db9740ccf8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.36.141.61","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.36.141.61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b8d843f-9069-5355-9a74-faec863a14d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.37.156.238","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.37.156.238']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26be2790-3e8a-5e77-8c1b-771b2a6ab0a3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.38.3.104","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.38.3.104']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c600e893-e0d3-50aa-bda9-2a43fbbd251e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.53.15.17","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.53.15.17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b2dac36-a066-5475-8d21-7064c6994ee5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.53.15.18","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.53.15.18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7fe6c6a-afe0-5853-b2e4-344b9552c4fc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.53.15.56","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.53.15.56']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e323381b-5f28-5b8b-a8b5-8bc42d4016b1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.153.212","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.153.212']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b896e68-da0c-5651-9a33-01e518f9c813","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.101","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.101']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57c5d3fc-1b81-595f-b434-e246b320ffd2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.119","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.119']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--612bff7c-5a8c-5895-abc0-58ebc863b23a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.122","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.122']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5a30218-19b4-5048-bf8f-1810f21a2b38","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.144","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.144']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7bacf02-3240-533b-8bfa-63f6d0383d14","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.201","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.201']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8c55f4f-1e56-5797-b226-f22f9eff4911","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.216","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.216']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80ae198-ff2f-55ab-b3b6-52489aa48e7a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.234","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.234']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d894cfa-ab58-5cf9-bd71-2b176bf9e70c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.46","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.46']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7484871d-3d81-53a0-ad8c-38624a00ad6e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.32.6","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.32.6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5413c5f6-cda7-51c7-9063-b279f89aeb3d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.33.124","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.33.124']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d855f794-8102-55bb-af5b-fe16395f406d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.33.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.33.131']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e794e3-5952-5123-9825-c59bda2f7aad","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.33.148","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.33.148']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b0ef432-dfb1-5dfe-8c85-ab3ac707e8d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.33.53","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.33.53']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b91f1ce1-40d1-5a29-8054-a817b358d9c4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.33.84","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.33.84']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a755a739-2ff6-5281-a0b7-7262fff905f4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.33.89","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.33.89']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8780e68-8aa6-57a9-9bb6-886679a317d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.10","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.10']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57e1eb0c-5f7b-568b-bf45-ff1b6181b90f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.131']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9105e232-ff9a-593e-b2e0-3cdd9b06aaa2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.209","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.209']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbdb3571-ebd3-5b52-b925-2fa304d1ac51","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.215","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.215']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6bef989-ecac-5e6c-8a59-6a1e19211f3c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.44","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.44']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f29812d0-e722-53c3-a8b4-cc715334e6aa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.34.62","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.34.62']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b3e7e2-4bed-5caa-94ef-4128972ba296","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.175","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.175']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ade486d-8d9b-55da-8c0a-bf3fd6e4d760","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.210","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.210']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25f16e0b-30da-5cb8-9b76-2e606052451d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.244","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.244']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79bb4f61-7e9e-5cd0-b608-8feb70a86b4f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.247","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.247']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7899c753-3a46-5e68-814f-200c2add0466","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.31","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.31']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89411de8-6a2b-5121-a5bb-19f18670bf5f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.56","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.56']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93423720-2d8b-5139-9285-7e0ab5861e50","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.6","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbc1e3af-6818-5ac2-8ef9-e03acc2f516e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.74","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.74']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89d88e70-24ea-50ec-b440-4e4a3ff07b65","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.77","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.77']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30050a94-e0c8-5a4a-93ee-22901bf5f697","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.35.79","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.35.79']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd87b6e-583c-56ec-a797-74f3d7ace55c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.16","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.16']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2fc853eb-3d26-506b-9f44-64e4e8311700","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.169","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.169']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bdf2a1f-e987-5fbb-9965-319d01b1c980","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.203","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.203']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2260bfb6-ec77-5c01-a7c4-5ac3096bf00f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.211","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.211']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46692391-4a68-5ac1-9bd9-cc454609f308","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.231","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.231']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c779a40-1f89-53ab-a474-45cd1b40547c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.235","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.235']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcb92b61-b777-576e-aed4-7c0338844ed9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.241","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.241']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e99d92d-1aa8-53b9-a042-d025642a0078","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.248","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.248']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7e4dc4d-afbc-53c9-91e0-8045b9575420","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.40","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.40']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18791364-5318-5ad3-a4f1-41127eda7990","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.64","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49ad2209-6d74-554d-95c7-da9910f2c077","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.66","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.66']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b568e7eb-55c3-56f0-873d-10499395ed69","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.74","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.74']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36a38bfa-1693-51bd-8eee-497df7c34824","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.94","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.94']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4c622f0-f2c3-51b5-89cf-ed7eb0f8b6db","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.36.96","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.36.96']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a9e123e-77d7-50b3-b268-1028b3b1ac3e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.102","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.102']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--341fe502-cbac-59b1-be0f-08c2bbc07752","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.121","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.121']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1bd6cad-e4d7-5909-82a4-d7802c1cd470","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.147","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.147']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db9b500f-452d-5f99-be55-1149fcfeba43","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.15","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.15']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83f6c0c1-a76f-51b7-8cb3-02b867d31e97","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.159","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.159']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--304a2110-c572-5e93-ad4c-262f74d75507","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.162']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdb24803-1297-5b4e-8bd8-a754ec80c609","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08ec7272-88dc-5457-ae93-9fbe74987ec6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.37.83","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.37.83']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c380fc34-56a1-528a-b37f-ef18ab581471","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.38.152","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.38.152']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39c825e1-883d-5f19-bd33-16e8cc6918fa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.38.32","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.38.32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--023815cd-975a-5e41-8aa5-83a5f4ad80c7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.38.76","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.38.76']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1179bc7-e3ef-5aa1-b64e-1482b3578654","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.39.111","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.39.111']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a330ab13-c42a-57f4-b3fc-27675dd4aa59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.39.132","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.39.132']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abc8a276-420d-5830-b939-82f4b7b69205","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.39.138","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.39.138']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4359c5b4-46e9-5988-8b39-0b82e1e277e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.39.247","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.39.247']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ceaf60b9-28ff-5270-bba7-bb907a48c552","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.39.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.39.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e874c3f-3487-599d-a7c5-d6cb9049f48b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.40.110","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.40.110']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e5880ef-6974-56d3-ba15-9f024d321922","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.40.213","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.40.213']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34602b1e-0b69-579b-87bd-c548e023688e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.40.216","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.40.216']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95d7b267-51c3-5649-a949-af326069954b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.40.235","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.40.235']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19446ec1-2177-5498-9d9c-d0da267ed924","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.40.241","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.40.241']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a89453a4-53f0-5df6-91f0-90d5c3c85f95","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.40.94","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.40.94']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--116a80ee-5501-5293-81ec-95073e82932d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.41.185","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.41.185']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92d32465-ec2c-593d-b566-20f45385bfcf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.41.201","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.41.201']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e6c69b4-bd86-5e77-b975-9c3bc5568e7d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.41.227","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.41.227']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74304fc7-006e-5833-bd20-0062ae10095c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.41.238","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.41.238']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dff891fd-bc27-5e11-adfb-97af68846886","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.41.49","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.41.49']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c0f7f0f-adeb-592d-abb0-aee42f9a739e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.124","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.124']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc6af7d-594d-5234-b799-e142185d7a57","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.13","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.13']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f428936-d361-5e44-83ee-e61887da30d6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.149","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.149']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a151dfc-edab-5fa8-a42b-1e8a8d968044","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ea5ff7-16d2-53b0-a90c-7e8d8658a3c7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.191","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.191']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--300d776c-8b9f-5b19-993e-c29ab938db52","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.251","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.251']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7412d976-0438-5649-bb50-9c06b7cd0cb5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.66","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.66']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--980d5cb1-079b-55ca-9f49-25c7f8403865","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.42.89","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.42.89']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe7902c1-0a33-5697-9990-c516f923d8f0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.43.110","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.43.110']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4c94a9-e30b-563f-a2cc-8cf5c37b77a1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.43.201","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.43.201']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae69dea3-921f-56ef-8aba-939a49c45e52","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.43.242","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.43.242']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6fa11cde-68fd-5465-9f63-ef68f20d5aad","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.44.181","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.44.181']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8819cdde-69b3-55c5-8d1e-47ddb09d2abe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.44.31","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.44.31']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e4ab506-6a94-5004-836a-536ad0a4bf15","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.44.58","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.44.58']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8853854a-3453-5c8b-a441-ee7b175960c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.45.125","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.45.125']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88beebbe-7223-5930-a0a8-5510475a2be9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.45.227","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.45.227']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--854bee01-c865-58fb-aab0-99e22cb2c92b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.45.40","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.45.40']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b69bdd6-251c-5286-beb7-3ecd0642f213","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.45.65","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.45.65']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a95487c-de73-5aa8-8152-f788b50e0eb1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.46.183","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.46.183']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d15be2c4-813b-5284-8290-231c0c919e26","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.46.184","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.46.184']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dfdf96d-b4b7-5e28-9359-20b1529b2b17","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.46.211","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.46.211']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--992a3eac-ed5d-56e9-8688-631a5bac8b9a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.46.50","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.46.50']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a462c150-a9e4-5847-9ec7-55045d6d65e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.47.102","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.47.102']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1cf487f1-5139-5d7f-891d-694eec138c17","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.47.133","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.47.133']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd70ed96-0ad1-5cb3-a788-1b5c242f9c63","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.47.170","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.47.170']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e78fc6c1-0192-5b8c-b84c-ca7af8055a95","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.64.47.48","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.64.47.48']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bf9748b-6f4a-548c-9a27-9ec26af82d0e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.66.0.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.66.0.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4607486-e8ed-5466-b51c-3159f202cdc2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.66.144.161","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.66.144.161']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--987628f7-a931-5f85-9b00-420cabfd9358","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.66.146.196","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.66.146.196']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95ed4499-7251-5d03-b881-556435d2689f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.66.146.92","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.66.146.92']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b5cf53f-41fe-5408-a3c2-7d118b553c38","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.66.181.28","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.66.181.28']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed35ef9d-18b1-58d5-a6cd-ee2c0ac08016","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.66.181.88","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.66.181.88']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79ec3df1-35ca-5b1b-84c1-1ba5db462896","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.68.84.17","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.68.84.17']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80ecf7c4-e1ff-52fc-a3fb-f81cdf453296","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.68.99.52","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.68.99.52']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b39db777-e053-5f70-8bd1-0f8bff992fb4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.70.104.200","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.70.104.200']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b32292fe-7f70-5eb8-b238-a5873a3f2f85","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.88.107.221","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.88.107.221']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b0ce120-bba1-57eb-a310-354c1b2995fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.88.137.145","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.88.137.145']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bc0c15f-a5c1-5938-8dd8-ec0f3ee1c334","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.88.137.213","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.88.137.213']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d4b4b17-2b09-53e4-8ee1-8f4aa18a3dc4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.88.137.80","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.88.137.80']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2055094e-f440-50b0-b75c-d2470f3400fa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.89.12.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.89.12.34']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc53fe5e-37c6-5862-b7df-11d47eb3026b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.89.68.137","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.89.68.137']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03447374-3f5d-5692-9c96-f0ea16284387","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.89.85.207","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.89.85.207']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8db40cf8-a8b9-5f7a-8315-31b98b06bf58","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.90.126.41","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.90.126.41']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--020b550e-2474-572f-9d13-37d97d0b85f3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.90.34.90","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.90.34.90']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc226e7-507f-5249-adbc-fef640a80a4e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.91.123.220","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.91.123.220']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ffa52cd-da9c-5a94-8984-9f2d7eb5ea51","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 102.98.88.30","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '102.98.88.30']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2250c3dc-6214-5d61-b8b9-9edd9f75ff17","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.1.64.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.1.64.34']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcb602c3-1351-533c-beeb-59dba4cae1b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.100.208.154","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.100.208.154']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dd577a7a-1339-5a07-8974-e225c3cde545","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.100.209.142","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.100.209.142']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb9af3b8-3d94-587c-bafe-a736c8e373cb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.100.211.40","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.100.211.40']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9528af5d-9776-525d-a27b-3ac3d1efcda9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.100.216.56","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.100.216.56']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b45f4d-c4dd-553b-9f04-c8094b5069b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.100.84.116","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.100.84.116']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a84f19c-259c-5def-b6ce-2756d6d9ae05","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.101.117.73","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.101.117.73']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9303c05-7135-57de-8133-593c65c6a13f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.101.206.53","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.101.206.53']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7a70a79-0f83-506d-94bd-12355034c314","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.101.216.26","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.101.216.26']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e56d8edb-e141-5dcc-81c9-23d2bb97971a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.101.52.208","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.101.52.208']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd37ef7d-4814-546f-9634-c4bf8da6da8c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.102.74.4","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.102.74.4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22c0a072-abd8-5fe8-915b-3b77e58c6cd1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.103.20.239","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.103.20.239']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8602beb1-8659-56f7-b514-9680e421418d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.103.245.61","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.103.245.61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bc2fa00-1f30-576d-b271-cf85e5126ce6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.103.245.7","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.103.245.7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e369546-9022-5f41-8edc-463a0274aa92","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.103.53.44","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.103.53.44']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02887b19-528e-5d22-84a7-6b56c30b2d92","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.104.127.134","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.104.127.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--850085d5-2ec2-5cfb-bd93-4b8f2baaaccd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.104.127.167","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.104.127.167']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed87545b-7cac-51aa-a622-5d5bca3bb838","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.104.127.49","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.104.127.49']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44149c54-b94f-5948-bdba-3672b8bf7d1a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.104.210.41","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.104.210.41']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--834826cc-f98a-5531-9968-78b39c4f695d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.104.214.8","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.104.214.8']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--213677fb-0a2f-512b-a5a3-2d210d1c96c9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.105.176.70","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.105.176.70']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01f6d95f-14a5-5052-af49-effceee84a0f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.105.208.213","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.105.208.213']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--428877c1-6b3a-5141-9b67-e5107d83d45e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.105.53.15","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.105.53.15']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0c70172-63e5-5f0d-8620-7293265951ea","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.104.25","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.104.25']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b98f3afe-42d0-5575-a3fc-a18b6624e0b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.154.20","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.154.20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82f077eb-c713-5813-b599-09bb82437176","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.188.32","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.188.32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ec0e772-8310-5c79-86f4-45c18c94708f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.194.74","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.194.74']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9794d7c0-be32-5de7-964b-a394f309afaa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.200.58","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.200.58']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4926daa6-432f-50c5-9df7-d64b73118d82","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.79.242","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.79.242']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba52965-f8f7-50cd-a2c3-07271f8cadd9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.106.79.66","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.106.79.66']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--844a3960-09aa-5729-a850-979e62fbb67b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.107.60.45","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.107.60.45']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69284b69-0472-5f80-a71e-9014470e5819","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.108.67.180","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.108.67.180']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa7ff179-5d46-5fe0-9b10-c09802ccf118","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.110.149.181","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.110.149.181']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--549d3d62-6dc3-50ef-91d4-cfe1c9dd1ca3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.110.34.131","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.110.34.131']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd217590-cefa-5c9d-9fd8-e271c89a1a7b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.110.48.241","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.110.48.241']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85dc6798-ddd3-50c5-8655-5b5d8713f026","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.110.6.254","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.110.6.254']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c0e6d28-6c3e-5d1e-975f-5800500ae4ff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.110.81.114","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.110.81.114']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e2ce76c-92e0-572f-84f4-7d021684dfc0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.111.228.36","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.111.228.36']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da4806b7-29a5-5224-ae8a-05f5e9d47692","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.111.6.121","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.111.6.121']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80038ffc-de19-5487-af00-58e891af320e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.112.173.87","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.112.173.87']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5718ecb0-78ca-59eb-a0e8-f25807664d0e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.112.20.211","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.112.20.211']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92cc873-e2b4-57e2-92ea-bf49e5c6060c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.112.224.81","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.112.224.81']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e59cb440-aafe-5d6a-93d7-beb997625ef1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.112.245.85","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.112.245.85']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ffe9dec-e661-5a8c-bde0-eee0854ea93d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.112.54.86","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.112.54.86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4eb5f029-fac6-58d0-a299-8118bcf44c3b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.113.105.228","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.113.105.228']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6a02b7-b995-53e8-93ef-cc20812a9778","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.114.139.14","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.114.139.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--571078a4-4e57-5104-b8fc-56f225dc496b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.114.146.178","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.114.146.178']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faf257a6-da41-5180-8d72-7907239a6558","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.114.147.217","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.114.147.217']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b8792ca-32c3-50c7-94bd-b99aeb1d1202","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.115.40.152","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.115.40.152']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea99a2f-97ed-5e2e-8cce-2fd2a959e96b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.115.41.16","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.115.41.16']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdcc6400-321b-5005-85df-d5b3304a1de3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.115.48.20","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.115.48.20']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a24f0680-b7cc-5740-89a5-4a645edbf884","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.115.48.229","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.115.48.229']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31eb3956-76ac-5349-92ed-fddfd5a6fa15","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.117.14.198","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.117.14.198']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b0f7fff-fb19-51d1-aa47-e2cf96d97529","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.117.150.82","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.117.150.82']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--def5277d-12d6-511b-9318-b21f6a3d9422","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.117.56.120","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.117.56.120']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed0e4698-610b-5f9f-832f-ba609af54f38","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.117.57.134","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.117.57.134']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a52c69fa-4159-5da7-8a68-691d740cac6d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.118.199.234","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.118.199.234']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ab202c9-d6b9-57a1-b1fd-2459e4273de0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.118.28.15","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.118.28.15']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36066288-4e0a-5090-ab18-b6c7735fb86a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.118.29.127","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.118.29.127']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30e41af9-64a1-5f82-9bf9-e9d9f0b20fbd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.118.82.254","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.118.82.254']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6a26e35-e1e9-5996-93ce-325ded23581c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.119.94.10","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.119.94.10']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97db20b2-50cc-5806-a9f1-cc9c3247680f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.120.116.162","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.120.116.162']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c3dca56-6dfc-5172-8b80-6ac236249f8a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.120.227.88","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.120.227.88']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b57b3ec4-153c-555d-b106-c639078a5400","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.121.38.163","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.121.38.163']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bd598a2-1872-54be-8fef-66723580c399","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.121.7.93","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.121.7.93']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80de8406-7678-5453-8574-bc857767028f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.122.221.179","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.122.221.179']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b18c2df-a335-5de2-aded-fef94f5acd32","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.122.34.142","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.122.34.142']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--137e2a91-817c-5fd8-ac1b-23d9ae233bb4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.122.67.223","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.122.67.223']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3b67431-ce53-51a2-b9af-c27f2a2e265f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.123.113.169","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.123.113.169']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--071ce850-9d19-5d95-ac1f-7996a89afef6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.123.225.3","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.123.225.3']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4c7bcc1-ea93-5d87-bf9a-d4e912d1024e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.123.53.88","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.123.53.88']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed6f1d26-dc06-5444-b7c7-e551b37891fe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.124.238.130","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.124.238.130']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d74554ac-c64f-54c0-b2d2-2fa112614def","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.124.93.232","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.124.93.232']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1818f3a2-8c99-531f-99a6-3a4e1fafb62f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.125.103.201","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.125.103.201']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11470add-1e3f-5134-9699-21b42c9bc778","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.125.177.250","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.125.177.250']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--057063e5-1cb0-5961-9fe2-5eb5a16651e2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.125.179.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.125.179.34']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--723ab489-5d45-59c9-a85b-786ec3261e44","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.125.179.37","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.125.179.37']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0606a84-236a-55bd-a61d-fe80b22008a2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.128","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.128']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eef77e20-3203-59a5-ac03-c8fc7ab75abd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.129","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.129']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8bd1421-559d-5e0f-aa0a-11fd4d59e647","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.135","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.135']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ff0a139-9100-57b3-bc39-000197adf026","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.139","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.139']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00705418-eb7f-5df0-8d9d-51908a84ade6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.144","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.144']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d04ae9b9-1591-565f-b86c-56543fe10dec","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.145","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.145']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abb7ab29-c20e-5920-b768-d67dda56f20d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.146","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.146']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e25da892-fb18-5d16-8779-11a621068849","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.149","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.149']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd070fc-0ab5-5d6f-8320-61794633817f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.153","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.153']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--157044fd-a676-5808-8992-39dfd0e8f9b8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.156","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.156']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9532c666-a812-50a0-8eb3-bf3d5daf96e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.170.157","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.170.157']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd1b491c-8bf0-59a7-ad87-c31b3d3076cc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.32.106","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.32.106']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b3eeeb9-5ec5-5948-8310-14e2c6f9841c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.48.249","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.48.249']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0282a75-f79b-50d9-a3c5-610064ae9014","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.127.7.120","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.127.7.120']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2c6380d-9ff2-5cbb-aa3d-88ad28dbf03c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.180","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.180']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a5d9507-d4c1-5251-a770-14ad4b345d57","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.181","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.181']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71a1f330-6a5b-54a0-86ce-05a97280e073","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.183","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.183']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86e98e45-606c-5a73-ba76-775ab5192e45","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.184","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.184']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcc430c1-4a81-55f0-b346-69e9f7a7b95a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.185","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.185']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13d71b31-912c-57d3-914b-d9cea2ff84ff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.186","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.186']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52678d4d-95aa-51ad-b55e-9704859d1eaf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.187","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.187']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80c1ac94-1d90-5645-af80-024c5b595f3e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.189","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.189']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35d5d409-d9b4-5eff-9015-219704b8a9eb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.192","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.192']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--feff66ed-c0e4-5441-87ff-428b9df6d1e9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.193","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.193']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecdff273-1157-5fd3-8a05-b0f6f21948e0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.194","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.194']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2a11fe2-b868-51f5-b043-b1fb9ee1afaa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.195","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.195']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8fe9d83-7284-5693-a0be-4028c5c0d2ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.196","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.196']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a28deb8-f5cb-522e-a054-dbbd88996ba5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.114.198","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.114.198']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a4d9d44-1cde-5a61-8857-9f07e90bc8d5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.134.206","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.134.206']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8751be44-b389-505f-abda-35ad35d126ba","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.134.238","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.134.238']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce9d66db-6b30-51a4-a00a-37946dc87341","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.129.221.202","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.129.221.202']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7223a74-73b1-5e2a-9f69-9e79ed996ec4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.206.100","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.206.100']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e3f13f7-6ca9-5cc5-9aa6-4f93c095676f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.206.122","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.206.122']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea73eb30-740c-5038-8b0a-c00e3857330c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.206.142","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.206.142']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6d5b7e6-1bf5-5c2e-ba81-5cc6463b6285","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.206.152","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.206.152']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7dabc1e4-0590-5669-af73-941c63919602","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.206.18","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.206.18']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2e8e50c-1ce5-5e07-a1c8-cc76c1a0e7fe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.207.166","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.207.166']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--689de2e1-4e57-5679-a0e8-166b75ce5f6f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.207.34","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.207.34']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5af796d-ea7a-5249-b967-12282cab4e08","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.211.38","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.211.38']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9dd04578-12e5-5786-b3de-263bd6d3cd67","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.13.42.19","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.13.42.19']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb4f4e5-0310-56da-a4f5-da867a933cb9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.130.167.198","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.130.167.198']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea5d0c8-8932-5698-a02d-273a9078e2b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.130.18.14","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.130.18.14']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13603859-7074-5fe8-bc2b-4ac39feda5d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.130.196.110","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.130.196.110']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4083e4ee-6de4-5497-abc3-1b026d302098","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.130.213.223","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.130.213.223']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2e2b719-192f-5437-927d-61e42d3ca9aa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.131.144.53","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.131.144.53']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9ef4c4-b4ce-585c-8ff8-824328be1dab","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.131.184.211","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.131.184.211']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd10f134-bdaa-5095-9c35-a666b10c8f54","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.131.213.173","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.131.213.173']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed75bf04-5425-59ca-92f6-23e704c28865","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.131.61.136","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.131.61.136']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8c8907c-a0f0-53d6-843c-5479b598bbec","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"scanner-bruteforce: 103.132.237.18","description":"Aggregated from open source feeds. Score 36/100, 1 sighting(s), confidence decays with half-life 2d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '103.132.237.18']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":36,"labels":["darkwick:provenance=feed","darkwick:category=scanner-bruteforce","darkwick:family=brute_force","brute_force"],"external_references":[{"source_name":"blocklist.de","url":"https://www.blocklist.de/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d250da7c-3994-53b7-9298-83fc70590862","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 1.10.16.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '1.10.16.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01098f97-3dfb-597e-978f-90d4062cdecc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 1.19.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '1.19.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e633da5e-585f-541e-a0bd-7a861df46428","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 1.32.128.0/18","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '1.32.128.0/18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b71a64b2-50e8-5897-b5af-3590836fe662","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.26.75.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.26.75.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52c2a8b1-a107-5d65-ae11-7040afc0b257","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.27.5.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.27.5.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5b6551-766e-52cd-bbcb-c396c5591b11","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.56.192.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.56.192.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99eda1e8-547c-5739-8a8c-44e2a69c541d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.57.17.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.57.17.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb654284-7710-5929-afd6-c89ae20b2a37","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.57.122.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.57.122.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4419e209-2a7b-5a02-aac0-fedc681d8c15","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.57.232.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.57.232.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--151bd4a6-6f9a-583c-a6c7-3418fe816119","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.57.234.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.57.234.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92494ef8-efea-59b7-9bfb-0f0bcfc3de12","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.58.56.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.58.56.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23b661e1-b5b4-5a5f-95c7-9b99b0b87488","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.59.152.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.59.152.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6eac2690-e92f-5f0d-a22c-4238ef4b695c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 2.59.153.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '2.59.153.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64c091f3-aa7d-5e6f-b159-eb33709c7240","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.42.92.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.42.92.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58300ec9-4cde-5a5b-b42f-4ba5cc8165cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.101.86.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.101.86.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a25e087-6065-52c4-8dc8-b9b7cc55577f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.105.220.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.105.220.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d352b2e2-d155-5621-b55c-a48fef80bb79","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.175.189.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.175.189.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5869f24c-10e8-5917-8112-4060e32f2c4c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.183.60.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.183.60.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0851133-fc05-589a-b27c-85dc439ba695","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.188.236.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.188.236.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07bdf587-8557-5071-92c8-ea57cd19652f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.230.201.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.230.201.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a755283-7585-5fdb-a90a-7ad74928dc18","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.231.63.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.231.63.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b487de04-5ece-50c1-a873-032aeff09b8d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.252.83.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.252.83.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ededaf7d-6982-5346-92da-669eb34ac880","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 5.252.153.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '5.252.153.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5e9dc097-0676-5144-a494-64401fe12854","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 14.128.32.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '14.128.32.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55c5f12c-e3c7-5619-91b1-99c0cccb6353","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 14.128.48.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '14.128.48.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83b72935-7b98-5055-859e-f5d1b12ca560","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 14.152.94.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '14.152.94.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0e85c41-0291-5f5f-a6ac-d2419e2f5c99","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 19.200.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '19.200.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d562411-bcc5-536c-9466-c44b5459d58d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.129.252.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.129.252.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbc1cab9-d001-545c-8617-513318956c5e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.132.164.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.132.164.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54bc6a0e-acbf-5fd5-b41a-e7f90d74b35b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.137.100.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.137.100.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d906ef1-c169-5ee5-b89a-8e5cab17236c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.143.16.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.143.16.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dabb5dc-e537-5c9a-aa0d-ab78789690f0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.146.240.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.146.240.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36fd9190-7910-5a9b-8b79-942e6ca22702","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.146.241.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.146.241.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ad7e27d-6756-530a-be4b-8e9c40dd73a5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.146.242.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.146.242.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9b54a2f-bd0a-5d7e-8330-f8efb4a620d1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.147.52.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.147.52.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f571a0a2-3713-5b8c-9331-cb57c6d89961","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.147.148.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.147.148.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4bc3d9a4-d63d-5b17-9916-f641be072b5c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.147.156.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.147.156.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3157f8a8-7208-538b-8229-c8d2f7119d9c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.147.164.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.147.164.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc2dbb34-9390-5775-85cb-35575fd85bea","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.148.144.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.148.144.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ff6ed88-e7fc-5a24-92ca-24b55fc11269","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.164.152.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.164.152.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0163853a-de89-5db7-b68c-d6ceb3083eab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.164.153.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.164.153.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--115938ec-3210-5a2b-99c8-db1ae20d7b7d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.172.112.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.172.112.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--551ed22a-6834-55eb-8fd8-f520950ae502","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.176.184.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.176.184.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cac7633a-04b7-52a6-9665-14b899b015cf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.235.128.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.235.128.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6834e6b-635e-5a22-90f1-838791f2ff4a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 23.247.176.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '23.247.176.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d76fef5c-3573-5a4e-887b-5d79734a603b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 24.137.16.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '24.137.16.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46007c26-af12-5878-8ec2-d7433d5da52d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 24.170.208.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '24.170.208.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1588a628-3bbf-5ede-acfc-e3a246c09838","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 24.233.0.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '24.233.0.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25930d34-2eab-5019-b8e4-41fbc829c0c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 24.236.0.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '24.236.0.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3eb04065-be9a-552d-8126-a46443f6d416","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.50.63.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.50.63.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--634d6310-6c9e-52ea-8db1-3c189f34fcb3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.99.128.0/17","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.99.128.0/17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79309ffd-c2e5-55b9-b0e3-0837611a5b6e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.100.28.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.100.28.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--026a0411-7593-58bd-b4fc-df4e9e114230","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.112.32.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.112.32.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a537d7ac-145d-5a13-b253-3a793a5c18cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.122.32.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.122.32.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--809b154b-7bbe-53f5-ad83-db12491fec71","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.123.208.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.123.208.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31c5a085-df4f-5a61-96a0-6d53c23682f4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.124.0.0/18","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.124.0.0/18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb873d43-589f-5a98-a6bc-3fd3989a5148","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.124.17.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.124.17.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa399dd-1369-567f-9437-6ea803a447ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.124.41.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.124.41.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2909e436-7f8d-591f-a665-0c35b424e598","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.126.160.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.126.160.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2f1e7d-2243-5500-9d3c-b3679f87cfa9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.146.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.146.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb1bce5c-76cc-514c-8e9e-58f46e1ac262","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 27.255.85.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '27.255.85.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2778219b-a8e8-55c0-839c-a95ae302ff1a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.43.185.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.43.185.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3b70122-85ce-5953-80e0-43c319f9caf0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.56.52.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.56.52.0/23']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c3b1ab2-4be3-50b4-9471-0149ee1948fe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.56.209.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.56.209.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--778605d9-5d93-5cec-8b98-c2a3661231fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.57.184.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.57.184.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e78b585-06ba-55b7-a0e6-72d0178fa351","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.57.216.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.57.216.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f3776e-8e54-566d-9a50-f4b6d7c33aff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.76.32.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.76.32.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c028b86-6948-5e43-b0b2-05988ad35db2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.129.49.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.129.49.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dd778b3-448e-5727-9bf5-320b21296cef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.217.252.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.217.252.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--197d72c3-4c4d-5260-a700-11ebc672b9ac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 31.222.236.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '31.222.236.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b23fc6ec-a170-5fe4-998f-bd018ff89fcb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.0.8.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.0.8.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--658a04ae-63b4-53e9-a0c4-8f8ff659d453","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.0.128.0/17","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.0.128.0/17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07275035-26da-5e94-bfbc-c6054995e9fa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.37.48.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.37.48.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3effd2f4-4348-5b22-a7f4-d17b51ca9994","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.116.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.116.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1955e59-d9af-546b-8aab-2896e732b4b1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.119.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.119.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f88688ed-2bad-5bc7-9c89-65c6a7d2935d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.255.97.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.255.97.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--873c040b-79ac-5fcd-b6c0-5652d0744f05","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.255.98.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.255.98.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b68ef48-5713-5542-9102-db9df2e1cf58","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.255.216.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.255.216.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13ff609e-3875-547b-95cc-b704414e496f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 36.255.236.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '36.255.236.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85a3a13b-dc68-5cf9-8706-1b153912e644","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 37.49.148.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '37.49.148.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a9b6abb-0990-5095-a55b-2f140fb9a348","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 37.72.140.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '37.72.140.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad874c48-bcf7-5303-8252-d388560ae0ae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 37.77.150.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '37.77.150.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e9ba047-f378-590c-a8b4-608cbe58ae35","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 37.140.251.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '37.140.251.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--507e83d1-a7d5-5754-8708-bb011c3fb05a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 37.156.64.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '37.156.64.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1dc8d76-9f9c-5ae7-a92b-5a240db799cc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 38.18.13.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '38.18.13.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bb3fe0d-1b99-5265-866e-59b796996c96","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 38.92.184.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '38.92.184.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45f31ab3-c4f2-5435-99fa-d0274fb21802","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 38.107.120.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '38.107.120.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d269604-65d9-5451-b2b9-c0246e0ee293","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 40.183.136.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '40.183.136.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ff879e-a129-5f58-ba0c-b1cec175c40c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.128.0/17","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.128.0/17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f6af852-0238-5032-b188-02fdb1d8b9db","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.150.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.150.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0070dec5-547e-550d-bfe3-800b03b59473","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.222.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.222.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a22966c3-8b3c-54a4-9530-36c70f49ba0a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.223.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.223.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46194a9a-1db0-5db7-9b01-5547b564b356","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.224.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.224.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e338a0f9-31e8-5aeb-aeeb-683e46be038f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.225.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.225.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51dec96d-e2a0-5b67-9086-208f2ef85f7d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.226.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.226.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c03bde69-10d5-5521-a36a-7208f8cbdb3b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.229.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.229.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac4999e4-7ec4-5ea4-b9ae-0e6d9e4c50df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.230.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.230.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0404e96a-c9ae-5a40-94d6-6f26cfe54405","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.71.240.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.71.240.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41c0338b-bc1c-56b3-8837-6769196d2305","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.79.219.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.79.219.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7155bef-c277-5495-b0c2-8fb510554591","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.138.192.0/18","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.138.192.0/18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--995be95f-fd4a-5f4e-ba3b-f355dc5a9078","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 41.231.240.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '41.231.240.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee7fa69-8bab-5239-8f1a-a5b4cf642831","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 42.0.32.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '42.0.32.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--895c49c6-310f-5406-89e0-baa4e7bb6f2a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 42.0.128.0/17","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '42.0.128.0/17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f32a013a-7343-54ce-bed8-ded1a30f0494","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 42.128.0.0/12","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '42.128.0.0/12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85cacb77-ccea-51c3-8382-aa2287422780","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 42.160.0.0/12","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '42.160.0.0/12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8850dfa-6230-5d18-9434-edbb359ad72a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 42.208.0.0/12","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '42.208.0.0/12']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ae07a2-2882-5587-932a-9b051d84e81e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.226.17.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.226.17.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e9619f1-adf4-5450-8311-58da0064d126","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.228.157.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.228.157.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c660bf34-464a-5cd1-a251-2e4b9f125c4e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.228.159.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.228.159.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a592f14-4094-548f-8ba6-969af57a50ba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.229.52.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.229.52.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06396055-796e-5c1d-9be8-518e32e549e9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.229.240.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.229.240.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--839cfa38-86d8-50a5-9036-772deb03ca77","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.231.220.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.231.220.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6bd828b6-de03-5f95-8cae-7210dbf52892","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.236.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.236.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cce332c2-ec40-55ae-898e-681ada518059","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.239.104.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.239.104.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d3c503f-bd37-580e-8748-c1fb08547d59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.240.12.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.240.12.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0feae1ed-ce28-5e23-a735-da1e748efc2b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.248.40.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.248.40.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98664e63-e23e-598e-ba48-3951fefb1da0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 43.249.92.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '43.249.92.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbf350dd-398e-5d00-a62f-7b8843725b28","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.3.62.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.3.62.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--659b17e5-ba15-5230-aa0d-f06d7aefb5e4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.9.168.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.9.168.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94502936-dbb9-5a55-bcfd-6f2e4d427037","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.11.76.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.11.76.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81039bf0-3fc4-5307-8872-30bea4aeda90","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.13.37.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.13.37.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a986393b-6643-5a7f-880c-8b2e24f99cbe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.13.186.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.13.186.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fb281a0-08e1-5db5-bd38-81ba74aa3942","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.13.213.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.13.213.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cd3a939-f8e9-576f-be75-d454b63408ba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.15.21.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.15.21.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a54f8bb-6ef1-5703-81f3-60a5dca0cfa0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.41.128.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.41.128.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--020749c2-3668-5dd2-b9d0-19c6e4bca78c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.42.80.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.42.80.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee3ae8f1-7f67-5ee0-bcf2-4ca335b521f4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.64.52.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.64.52.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dc70355-cc6b-5e72-bba6-6b08145da6a5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.64.74.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.64.74.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c332afe-fe43-55f9-8bf3-d680136fcbec","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.65.32.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.65.32.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3e66d69-00ad-5ccf-a2ab-e31030399bab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.66.117.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.66.117.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98ac3a82-718d-59c5-a70e-07663efea16d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.66.118.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.66.118.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6b8ccb6-61bc-5bd2-9243-ad295dabf477","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.7.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.7.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ccd48c-82bb-595d-aba7-0341f151dab6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.10.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.10.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--411be300-05e8-57b9-a557-ab51d359eeff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.16.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.16.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--370859f6-93f9-5c32-985b-3eb10b818ac0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.40.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.40.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ccd36d0-5594-5d25-9264-943e6233fa08","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.47.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.47.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9abb0b36-c703-5c41-9bb5-a0317048d1eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.57.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.57.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2559359f-d7ec-503f-b73a-67c413914fe6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.59.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.59.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2f34cad-8459-5984-8b28-a554e692e0b1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.74.61.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.74.61.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9442d6ec-f596-5230-9618-218ef8db3ada","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.80.37.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.80.37.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe31ec6-8251-5929-8a8b-328e1632589d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.80.158.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.80.158.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--762a6f85-5244-58a3-a22f-2b86fe5e5901","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.80.248.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.80.248.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36062257-8427-5a3f-a1ed-0f7daae9442a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.83.28.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.83.28.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--17c8173e-6915-55a4-9e6a-534a7b25247b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.83.31.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.83.31.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8645c9a9-157b-57f5-bf99-dd639df7df76","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.87.249.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.87.249.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ec8b964-9e75-54b9-a8e8-640b80c9074c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.88.186.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.88.186.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c5edbff-a4f9-559f-bc2e-f447deb1fdfb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.91.227.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.91.227.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc78e1ae-217a-5e9d-8870-e53088df4318","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.92.1.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.92.1.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69c91cba-9e4b-5d34-bff0-2e76f0eb4bc0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.93.20.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.93.20.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e6ead8d-d594-5b65-a909-284e06349794","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.94.31.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.94.31.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c015130-e5d6-59d8-bebd-29c305a5bee5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.114.184.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.114.184.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d8c524c-7e79-5611-98f9-ee87d051ed39","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.114.200.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.114.200.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--787ef5db-b26b-58a2-964c-59320b107c6f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.116.76.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.116.76.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67c180b4-9327-5afb-9dab-d9a36162b4d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.116.224.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.116.224.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59d0cce2-3039-5ed3-90e3-ae228e82a591","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.117.140.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.117.140.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6bd7611-2918-52ad-962c-45a18f297a63","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.121.204.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.121.204.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6f2e7d5-2899-5534-a0ee-b58d27706c84","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.125.12.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.125.12.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29d580cb-9716-5b1c-aa3b-4a9437068b4c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.125.32.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.125.32.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcdc7424-9b21-59ef-8224-14f99a052e7f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.125.33.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.125.33.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15d510ba-f6f8-5a19-af32-6238ec5d1eb3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.125.66.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.125.66.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8043f15-29dd-5748-aa1a-415605e415b6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.129.187.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.129.187.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29175a1b-87f8-5f84-b0e9-f2fe4cfa1896","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.132.180.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.132.180.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--566cdc94-22d8-5cdb-8ac8-1811ff6788b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.133.73.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.133.73.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ef69f1b-831b-5229-b518-3607d95c9e82","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.133.173.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.133.173.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86307b7-7410-5007-8659-aacefc560c53","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.133.246.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.133.246.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d95e8385-8eec-5802-84bd-9fbad246d8e5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.135.48.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.135.48.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a6b8477-9e9f-5634-a55e-6209a7f2aab4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.135.193.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.135.193.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3e361c-c501-5764-9580-3ce8a4b46620","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.135.194.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.135.194.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d450dc7-b45e-5da6-b488-814dafbf3423","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.136.5.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.136.5.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f2900fe-f922-520e-bf4c-1f7c5af3e8fa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.137.201.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.137.201.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67b19cad-ee0c-513a-bc95-949fe1e181df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.138.16.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.138.16.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7bf8256-e44b-5331-b8d9-149d2a8c2900","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.139.104.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.139.104.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da8e6ae4-358c-5950-9f95-09c66cc042ec","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.141.12.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.141.12.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cecd422-851c-52da-b161-f30961768f42","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.141.56.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.141.56.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f22a2361-fd07-5e69-8aa9-a34776b5cdd1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.141.58.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.141.58.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2f4467e-c496-5173-9655-08f8a1618c60","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.141.84.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.141.84.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--454f37d1-6b1d-591c-a31b-f7c399c434a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.141.215.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.141.215.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35b2f13b-163f-5bbb-a07d-d29a761ead7f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.142.152.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.142.152.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cea7a7bf-9af1-54e5-9f1b-cc11bc18a7e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.142.155.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.142.155.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de56407a-5ec0-5aea-afad-6ea3b416df00","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.142.193.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.142.193.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1957995e-9baf-5cc6-af9e-2b9377140dcd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.143.158.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.143.158.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6430f333-71f4-588a-afcb-a219edc9b721","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.143.201.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.143.201.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d61c142-7054-50bc-b876-a7443de7790c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.144.212.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.144.212.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a63f03-ec9b-56a7-9b4c-14a5ac5cfcfb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.148.10.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.148.10.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be8bed3-d315-5692-95b4-b9a80b1e385f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.150.34.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.150.34.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61c4d438-ca1b-504f-b1b1-8c5cf08e15de","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.152.149.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.152.149.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f349914c-ac0a-5d41-a680-183e7fa39191","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.153.34.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.153.34.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b55e068-3dde-581f-b0de-7d79e7f04107","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.154.98.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.154.98.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3df41c33-21a8-5a76-98ac-4df62e6ccee1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.154.244.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.154.244.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e410e5df-f8d4-576d-a401-555203eb9bf6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.156.87.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.156.87.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b615ed24-e094-57bf-bf48-6d633bfdc157","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.170.247.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.170.247.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","lacnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93cb3d2a-340d-5a01-8a92-f9ede71eccd2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.192.178.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.192.178.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73dfc4aa-f9e3-536e-af42-bb8b550e6e88","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.192.211.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.192.211.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e0013a-a579-5643-9d6c-0a9d672db206","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.194.92.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.194.92.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9b59385-0925-5d99-8dc5-cbb949a3e9ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.197.176.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.197.176.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43c6aea6-6b16-5326-82d3-0222e247687f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.197.177.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.197.177.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c39b54-fc1e-527e-87d6-43c4ffa45769","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.197.178.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.197.178.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae1bf49e-dd00-5792-9565-8398ef52eda1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.197.179.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.197.179.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ebc90fe-e44b-5d5e-aa0f-a3ddcdc1723a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.221.116.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.221.116.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","afrinic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e4d5fcf-419a-5d98-9394-ef9100c2d5f6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.230.66.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.230.66.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","lacnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa9423f1-3a17-557d-8e81-b21ae85ed8ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 45.248.88.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '45.248.88.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26133a0f-1564-5c1a-8adb-ae7cce226406","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 46.151.182.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '46.151.182.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6bec117-036f-573c-a934-3c6395e746d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 46.173.240.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '46.173.240.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afc63a87-c178-59fd-a483-453485bc6f53","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 46.174.204.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '46.174.204.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78afc2c4-9876-5ff7-81b2-0ac8c0ae951d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 49.89.240.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '49.89.240.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3a41386-92d5-5200-95d8-a5d1babbaf9b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 49.156.160.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '49.156.160.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b399327-3045-5f25-8db9-a1c34fe3f744","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 49.238.64.0/18","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '49.238.64.0/18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8beeb131-b24f-50ae-9291-5423a7c89b15","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 57.14.0.0/15","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '57.14.0.0/15']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdfe73ec-ed59-55c6-8725-2b802e55e380","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 57.37.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '57.37.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4700729d-8297-57f6-818c-93e0c8e3fce6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 58.2.0.0/17","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '58.2.0.0/17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ae52d1f-156f-56da-bf39-74511384d4ce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 58.147.0.0/17","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '58.147.0.0/17']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3ec6bcc-2a7a-5d2e-a76d-49b917276050","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 59.155.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '59.155.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fbc4596-5123-564f-ab06-f955e09ee47a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 60.200.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '60.200.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58a481ac-b1d1-5d24-a3a5-68dcca99c29a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 60.233.0.0/16","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '60.233.0.0/16']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a30b1ce4-73f0-5b10-9728-0947e377625b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 61.11.224.0/19","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '61.11.224.0/19']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fab56d33-e985-5059-a1e2-9c6136dfbff1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 61.45.251.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '61.45.251.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d45ccab-fff8-5b53-bca2-afb6392f2794","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 62.60.130.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '62.60.130.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdc7a392-d233-5a7b-a11d-82e5b437b510","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 62.60.131.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '62.60.131.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b38e33-b144-52a8-87a4-eb2b82475353","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 62.60.135.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '62.60.135.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c312458-653e-5121-a41e-c19edd18cc00","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 62.60.188.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '62.60.188.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7980963c-b998-50e6-bfbf-6cbef30dff2a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 62.60.226.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '62.60.226.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a84a342b-d934-5322-8eb7-634980a7b4e4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 62.204.41.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '62.204.41.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76d71ba7-fc68-5ec7-9b7a-623dfa4384e2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 63.80.8.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '63.80.8.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15b94823-33ff-5db7-81fc-0bc11f550d14","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.15.0.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.15.0.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3635694b-8d96-5e80-9903-770f53945e96","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.77.128.0/18","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.77.128.0/18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--563b1ab1-541a-5673-b90b-9c5f69f6b5aa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.89.160.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.89.160.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e81c8bc-925d-56b2-a367-8149cb4d5a13","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.89.160.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.89.160.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b12f8a4f-0237-5e54-a80a-d270d49e1e5f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.92.224.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.92.224.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59c4fc7c-97b0-5cf8-824f-1895d25bdbab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.116.200.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.116.200.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8783469-28b4-5758-a685-e57e67400e32","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 64.250.144.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '64.250.144.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fec67cf2-26b6-5f3c-b66b-362fec4726c4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 65.166.249.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '65.166.249.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45936936-41f7-557d-bea9-aaa6ad8a8526","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 65.205.64.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '65.205.64.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49128314-62bc-529c-8626-ac5404de446f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 65.216.208.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '65.216.208.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7252a611-1e5c-55c5-bea6-bb01832abb26","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 66.198.225.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '66.198.225.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf0540c-256b-5914-bcf8-284dd0a2451c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 67.219.208.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '67.219.208.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b156ec7-db3b-598d-9817-08229b9f1395","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 69.40.207.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '69.40.207.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5106dca8-6d05-5fe8-824e-44bb527c2748","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 69.165.0.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '69.165.0.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f81b52e-09fb-5d7f-8771-32a0333d2e29","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 74.114.148.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '74.114.148.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b020e65a-5d97-56a4-8800-ae17e8468f3f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.0.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.0.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bea4c78a-6709-5fb8-bba2-676bc9c644d7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.36.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.36.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2ee44e8-8661-55da-9100-90f173a0de98","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.40.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.40.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2dc789-4f4b-5fd3-82d7-93b8267597ee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.42.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.42.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eecc0cc4-b9ca-59ac-bcfd-e34eb90328dc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.52.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.52.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1f7b16c-0ffe-53e9-9543-9626ec7ccfb1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.60.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.60.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0d2b841-f1cc-5703-8974-7eced4b43282","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 76.74.78.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '76.74.78.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","arin"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--010b2155-6d02-5189-a72c-f8857fbdf19c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.36.112.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.36.112.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--431a0a88-0c6f-507e-a24a-2f916a75eabe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.47.178.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.47.178.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f988ba16-aaf9-562c-b940-23a46ae7f62a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.47.242.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.47.242.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11fbe69f-f7f8-54fc-a447-1c3acdc14659","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.81.84.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.81.84.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8806a5cc-2be4-56c1-8e68-47334e4ac3d2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.81.86.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.81.86.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4de7e376-3dbc-585c-84bd-67563390b721","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.81.89.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.81.89.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4bf592-8611-5af9-a645-ce1d4bfcbe4e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.83.39.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.83.39.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5f125e0-99c3-5a08-808d-856d0f4d421b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.90.154.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.90.154.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7933c469-d1a4-50bb-9ae2-7c347c2577f6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.90.185.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.90.185.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--880c6ad7-6361-596a-8a8d-17991e5004ca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.91.65.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.91.65.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc20f517-67a8-582b-bfc1-7b01ecfab30b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.91.119.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.91.119.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64f23be5-827b-54a2-8ab5-90479aee6050","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.109.3.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.109.3.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d3df81d-2211-5ac9-931c-ed852fa19123","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 77.244.221.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '77.244.221.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a447b68-752c-5344-903b-19c1ea1c454d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 78.40.143.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '78.40.143.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d3b3158-dca7-584f-b6ee-2fa9b58c7e48","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 78.153.140.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '78.153.140.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9ea1b4-8bec-5fbf-903b-dc7fc8b5fb88","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 79.124.62.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '79.124.62.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f8eccf-200e-555d-a983-9ff0562f8ef4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.66.84.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.66.84.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e0d136c-74d0-5ec3-9b98-9882e8d5ff32","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.94.92.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.94.92.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--358971e5-c548-5ff1-a727-ab751ba3a816","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.94.92.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.94.92.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ecca920e-1625-55e7-8cdb-332393def36f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.94.95.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.94.95.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ad850eb-a74d-53c4-9f95-a47a57db0822","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.97.47.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.97.47.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e37a91c-9deb-5eaf-b1c0-59532d677f9b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.208.192.0/20","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.208.192.0/20']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","apnic"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a37763e-dcc3-5a11-9341-d4a5d074db46","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 80.244.11.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '80.244.11.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a074865-fcaa-5298-93a2-34ced18bdd13","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 81.28.110.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '81.28.110.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92a7dd93-ed3f-5f8b-be46-4abce9e2c907","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 81.30.98.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '81.30.98.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db18cf38-aeea-5d15-9a4b-4bf0f33e2d8a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 81.30.107.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '81.30.107.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a91c34e8-3241-5bfa-aafc-d034cf57e9cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 81.94.150.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '81.94.150.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--117ec76b-133c-59f0-9502-6ceb6da0cb86","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 81.94.159.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '81.94.159.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41a76c67-c297-5642-b153-401ce2fe38df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 82.135.156.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '82.135.156.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--409ffa56-9f11-5675-b3b6-4843f6cc3d0b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 82.135.228.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '82.135.228.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77f28a86-ccbc-5bfd-86b3-fa3f3d567761","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 83.175.0.0/18","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '83.175.0.0/18']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86a0be50-fcd0-5376-90e0-232a5c437234","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 83.217.208.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '83.217.208.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b6c3af5-4ad9-59c0-b98e-466d5cd8f431","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 83.217.209.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '83.217.209.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53ac786b-355c-5297-b016-28150f99e519","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 83.218.218.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '83.218.218.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af9f55fa-7381-58b3-bb79-4564d7a2925f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 84.54.33.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '84.54.33.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2bb189b-454d-5406-a9ac-2eeedf43d8a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.11.167.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.11.167.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ce457f-d6eb-59cc-8c12-e45d06ca8e9f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.114.120.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.114.120.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81a19edf-ffc7-5553-9358-f892a1c554a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.121.4.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.121.4.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1e1544f-02b9-57f7-97f9-a5b8fceabde9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.122.129.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.122.129.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30bb0f89-f333-50c4-99eb-aec7f80f2525","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.158.149.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.158.149.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dfa9c47-a5e5-5d1f-8776-c20de1a0ab70","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.203.26.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.203.26.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e02e47f-1a01-507b-94f7-9c6b04d9bd60","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.203.46.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.203.46.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8d3dfab-876a-518c-a787-b6cee5833ddf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.208.212.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.208.212.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd8af5eb-2fc4-5a64-99a6-5f276586d8a0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 85.237.194.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '85.237.194.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f1f35f6-1f4c-5bb1-9537-12785f71f35e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.54.25.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.54.25.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49377f79-db23-51c2-ab65-7725c26201bd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.104.222.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.104.222.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--670bc9b0-dd6a-5896-b129-10365d57324d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.104.224.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.104.224.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a8b2396-c5ed-5bda-bd99-9eac3c01cba2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.2.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.2.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20617440-842c-54ad-8235-a21780c7b430","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.6.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.6.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c5ee827-28ca-524e-af85-69ffedf3470a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.176.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.176.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90d5e4d5-35a1-50cc-940a-c3775b20dc4a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.178.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.178.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f09acf3a-779c-5824-a7fa-a2f2ba5a5596","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.186.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.186.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26c8abe7-ed66-5500-9072-3733d2adab53","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.229.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.229.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1431ca7e-a947-5c92-8b94-a89b388df892","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.105.230.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.105.230.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9195606-b6ac-5022-b7d8-a75f28a437da","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.10.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.10.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39ed1a30-3b5e-5373-983d-5221febf5172","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.13.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.13.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--399ff70f-2681-5303-80f1-ead18a61afa3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.14.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.14.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21d7e7c2-008b-525c-985f-d925ed5ed085","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.80.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.80.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdc38eb7-0aff-5f36-bd8c-12389ddf3aa5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.94.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.94.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98cbd4af-e6d8-5817-9f81-074b69d4cc07","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.106.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.106.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f926553-fa34-5078-9459-be3797e1edc0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.110.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.110.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3cef89b-1015-5ee4-9c8a-b539da8d085f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.140.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.140.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23f3be8c-6f50-5801-b247-c8c809d43f14","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.106.174.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.106.174.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6051835-fd12-5f74-b558-b335f70f3032","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.107.72.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.107.72.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5b5e3cd-a394-59fa-a354-6ce4cfeb91b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.107.193.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.107.193.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1be3d51f-7979-5e5c-ad79-4b3364266e2d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.107.194.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.107.194.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a797c4e7-f12a-5e68-9c5d-dfaa702942eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 86.111.228.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '86.111.228.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a720362-3298-5cd5-bf19-1cdfb4eb208f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 87.121.84.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '87.121.84.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d50ed494-9cab-5b9e-9923-f2ee66897808","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 87.228.25.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '87.228.25.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a573ed8-3c66-56ba-9dd3-806e448df1ca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 87.228.109.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '87.228.109.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74337cc7-771c-576c-b038-bb896670073b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 87.228.110.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '87.228.110.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0855710e-ee1a-5d9e-b2a0-fa93c7a713e2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 87.228.112.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '87.228.112.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd3d2f43-aeac-5c29-81e4-015aa76d0705","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 87.251.79.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '87.251.79.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6cdc706-d08b-5dbf-b80c-6bcc6715baa2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 88.210.63.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '88.210.63.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23dea771-92b3-54bf-b8b4-7d5feb81e67b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.18.16.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.18.16.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--459bf659-45b8-56d6-89bc-bdbf96e7cb48","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.18.20.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.18.20.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9f4a822-3e6e-5b61-a32a-d2d42e7d5e11","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.23.126.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.23.126.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dd54d7a-33b8-501c-9570-61860d4a72ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.32.43.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.32.43.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2bdd669-2b02-5ee2-b619-e529efa9855c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.32.170.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.32.170.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18842239-236e-55d9-a79e-a5880e6c33d6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.32.202.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.32.202.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b88fdb96-8ea4-53c4-ba63-df4c8dab0ce5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.33.46.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.33.46.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8f05d0d-0607-543c-baf5-2ba09e9a1792","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.33.134.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.33.134.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3d3bea9-1890-5f28-94c7-62f3492592bf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.33.206.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.33.206.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e653cc3-1719-50d1-9d0d-afe9d0265488","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.33.250.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.33.250.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f33df757-cb40-5765-97e1-a05608e783cf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.33.254.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.33.254.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8eb38c24-5a32-5c89-b209-a2446643f33b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.34.0.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.34.0.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e7d314-ad13-5c16-a85b-a2b6335c2b8f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.34.4.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.34.4.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0081b990-64dd-5362-9794-d143560ec3a9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.34.102.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.34.102.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fe76023-a20d-559b-ba11-fb3cb8d63ccc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.34.104.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.34.104.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c942483b-5b6a-57f1-b7f8-3b5eedcb9753","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.35.89.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.35.89.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dcf9bb4-6874-5ae1-8e99-0004c716e1e3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.35.90.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.35.90.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f639e24d-a171-5871-8539-48cab8097492","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.36.136.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.36.136.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01e32f56-aaae-5a25-8e71-b509af8175c7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.36.141.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.36.141.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd3991fc-f50f-54f8-b181-b7968a8a5a54","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.37.96.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.37.96.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--44e7261b-e5b6-5457-935c-cbad773d91ac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.37.136.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.37.136.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8bb01b21-ca9a-528a-94e6-46c7e391f6c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.38.240.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.38.240.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bda67d4b-7608-596f-a390-432fd7de2b21","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.39.69.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.39.69.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7f31f84-1820-5c7d-9b0f-87017aa2035e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.39.215.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.39.215.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d355c6c0-a372-5484-a7f2-bd8f0afe3cb6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.40.138.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.40.138.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d7f6fd0-0fe5-57ed-86fb-25d9c2065520","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.40.207.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.40.207.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--571c77b6-1660-5b04-a5dd-0c77cc064733","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.40.209.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.40.209.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5841fbdc-be48-5c9a-90eb-a893bc5dd084","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.41.50.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.41.50.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83e38866-04c5-52cb-bf42-c31462605d5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.43.50.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.43.50.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca158d06-882c-575d-adb4-42669bb49e98","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.45.34.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.45.34.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b537f53-98fa-5a06-8aae-88f42494b1c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.45.82.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.45.82.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--98ba9a72-2d2d-5910-9d30-98b2945f84b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.46.47.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.46.47.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d4f6b50-5acb-5cc2-aece-55212c92ec4e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.106.83.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.106.83.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6efc24b-da13-5622-a90f-d2fd262fb3b9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 89.190.156.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '89.190.156.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--159a57a6-9bd8-56e0-8d60-6ee0a77ea2c8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.92.40.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.92.40.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53fb8270-01d6-5753-b512-a81c68644141","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.92.240.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.92.240.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca78f950-232d-515e-b21e-b05d616d7fa6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.188.254.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.188.254.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc9e8fc1-6a59-50bc-8022-c808431d065e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.200.133.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.200.133.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a65125b-8f00-53ba-877f-9010b2eb99cc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.200.164.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.200.164.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1361a5b-b2e4-5ff9-8119-8a8ddf5878b5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.202.233.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.202.233.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec84d4bc-02e6-5706-86ec-2f17eac1b8ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.204.224.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.204.224.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7c860fe-f049-5bbd-aab4-abc0b8574b87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.206.169.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.206.169.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28e0253a-a101-5abe-a59d-bc5b4bc6adf6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.214.109.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.214.109.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eb6b6dd-7c55-582f-819b-50657e4498aa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.215.85.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.215.85.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7f79c86-3b59-5fb4-adf7-1b9d3280a81e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.218.236.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.218.236.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9633651-40f2-50e8-812c-db27561119a0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.220.163.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.220.163.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8531ec85-bf91-51da-ad8e-319c1eb25dff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.224.92.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.224.92.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2603536-858e-5e91-8640-bd5a3ee81f08","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.229.52.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.229.52.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c826ecf-93c7-598c-89ee-2c11cbda6d39","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.231.222.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.231.222.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2753c757-7aa4-5645-a498-99a918a665ca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.232.18.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.232.18.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51d83c14-42e2-5ebb-b0b9-54d91723797a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.233.0.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.233.0.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56a09a92-a4cf-53a1-bf5f-9bdea6e4be4e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.235.130.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.235.130.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef939952-c39a-5875-978a-8945232a5a48","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.240.118.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.240.118.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d0d67a0-7c10-5fce-a8a3-829d775c23be","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.243.93.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.243.93.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51a4143e-57ae-54f9-8186-b4d84909284b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.246.43.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.246.43.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42ca65e9-de1a-52e6-889f-42bffa0acc86","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 91.246.176.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '91.246.176.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdc8ee6f-44b9-545e-b505-3ea4ef924567","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 92.63.197.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '92.63.197.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2937246c-aede-5d46-8b36-73b2610e83e6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 92.87.6.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '92.87.6.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--897b8f23-de36-5c0e-863c-1e12e123bbdb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 92.118.39.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '92.118.39.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6a1db5-9ce4-5b80-a04d-8760a8f5602e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 92.242.62.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '92.242.62.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87dfffbc-d032-530b-85ba-d27fe141a93d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 92.255.57.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '92.255.57.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa32ae4a-a14e-538d-8d51-29b64bfca634","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 92.255.85.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '92.255.85.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfccaf14-f1c9-50ab-9906-a5011da37b71","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.90.72.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.90.72.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6fbe87a-0c55-5d79-958c-cdfb63f8d269","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.92.72.0/21","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.92.72.0/21']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb88e9f0-5c7c-5113-b2c0-c5d3d6f56717","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.51.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.51.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--796905e1-3058-5b53-ac08-a09996c016a6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.52.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.52.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23e68c58-65b7-58d9-adfa-08b2bfa07c0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.54.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.54.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a577b29-5501-51cc-8203-0ccdee3312eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.55.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.55.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68c5a6a8-f8c5-53f4-bc96-253091105100","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.58.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.58.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dcafc67-5ba4-54fe-b5d1-e61b2be8ab9f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.99.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.99.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40ed729d-ca11-5a90-83d8-c1a942593d85","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.114.187.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.114.187.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--978b9709-240a-55ef-9add-5154ff48e290","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.115.59.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.115.59.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dea6226c-396f-5303-86be-c47d0ae1c76a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.119.118.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.119.118.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e768e488-9df2-5fea-8ed6-c7ab8077f3ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.119.120.0/23","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.119.120.0/23']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19c4c60d-8e5f-5c63-b2b1-8365bbcadf97","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.123.109.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.123.109.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d6dbbc6-7633-5e2f-91be-846d8097b284","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.152.219.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.152.219.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6763aaca-9691-5f43-9905-28d021ecb6eb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.152.223.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.152.223.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a317d0b-dc37-59a5-b330-dc7c88e7856a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.177.76.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.177.76.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2023373f-7276-5287-8e6a-16529a020e9c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 93.187.128.0/22","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '93.187.128.0/22']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd9dc579-21fa-5d37-96b3-61556be5259b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 94.26.38.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '94.26.38.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--114d1968-3d64-549a-8ae4-8372d4b64409","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"hostile-netblock: 94.26.88.0/24","description":"Aggregated from open source feeds. Score 92/100, 1 sighting(s), confidence decays with half-life 15d.","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value ISSUBSET '94.26.88.0/24']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":92,"labels":["darkwick:provenance=feed","darkwick:category=hostile-netblock","darkwick:family=hijacked_netblock","spamhaus-drop","ripencc"],"external_references":[{"source_name":"Spamhaus DROP","url":"https://www.spamhaus.org/blocklists/do-not-route-or-peer/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6752fa72-929c-5e8f-865c-0f2e6da85fa8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/meow.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/meow.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","sh"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902194/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c22d746f-731a-54ab-beef-b58b2addd76e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902181/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c96de47b-d030-5244-ad34-ad59349905dc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.sparc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.sparc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902179/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b6c8e5d-52d0-5ba3-a911-9f54587ec81e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902180/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c66847ea-5ee1-5296-8d96-54c3d88de19e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902174/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0a3cf1-1c1a-51cf-8c47-da6939d622af","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902175/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78569cd4-3b72-56c3-b6e6-2ddcb75993a0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902176/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5daec984-2afe-5df6-be0f-aeb7570a6762","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902177/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a741de8e-e580-5497-a21c-1b5508a76848","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902178/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ab1332-934f-5f56-b227-854b5f001baf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902173/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca665691-b0c6-55a7-80fa-2b2f4cde46a1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902172/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--637c052b-b629-58f5-94a7-255abd767b4b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/i586","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/i586']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902164/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32bcc46-cad7-504a-8c5c-618e2521a1ea","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902165/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d0b97aa4-317b-582d-8f92-ea1c8c4f62f5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://72.56.52.158/ass","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://72.56.52.158/ass']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902166/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f55a030c-3233-5776-980d-8a8f70769253","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902167/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cfec3bc-3479-555e-b2a0-5f1d335aff1a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902168/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e05b9f8-6540-5e37-85f3-534ceddfffa9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902169/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ed1a7d0-2e2c-5d0a-8507-a0a91fc443a5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.mips64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.mips64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902170/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41b608d5-5ee8-510c-9c34-a266d6826d85","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902171/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--131e2a3b-ce63-5991-8555-5ce5faa6e6d8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902161/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0d5883-159f-508a-997b-f742a1a20924","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902162/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3ef9706-17c2-5fa3-bd10-c2f921d1fc36","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/gpon443","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/gpon443']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902163/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1700dd77-a5ab-5d27-bc5b-e17237de6866","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902160/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6b72d9b-89d5-5fd4-bae5-0d2d78276f0e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902158/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cf815c-b9f0-5c42-a2dc-fc3483650c97","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902159/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f45b165-b579-5c83-9b62-3010a3abd144","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902152/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84346d72-3e18-5e2c-8ce5-3bf6140da5a5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902153/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91c0180e-1860-5007-bfb0-2f5e518b961d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902154/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ae4e24a-8f91-536f-8a46-72a154b0d499","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902155/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff9543ed-2b2a-59d2-80cd-0790234df78a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/wow","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/wow']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902156/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26a72243-7279-520f-90ae-31ec292091b3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902150/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--821824da-0a1e-5895-8ff0-aa78184f7540","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/thinkphp","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/thinkphp']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902151/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa52040-635e-5499-a94d-8f51a19f8c7d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902145/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3198a2a-55a6-546f-9497-4a51e45b7e73","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902147/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c46ce4d-e7b8-549f-99ff-4ffc4f5f5b5f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/mips2","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/mips2']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902148/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38db4f80-aec4-533c-9850-3fa75f067026","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902149/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3549eaa-bcd2-59e2-9b60-fa2d9b93a26a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/aws","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/aws']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902140/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d30629c-8e95-596c-b7d4-1b8f73e99455","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902141/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6f35ae-3449-5fb0-935c-27475a4d0d72","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902142/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0aad086f-50d4-50d8-9873-f575955691fd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902135/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c759a547-33e1-58f3-a25f-c0d0ab7fa50b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/ppc440","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/ppc440']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902138/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fc4f2bf-8e99-535a-9795-67222f3c57c6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902139/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71eb5680-6c7e-59b4-8d67-0f8bf867243b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902121/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1604015c-99f0-5fde-8979-dbc2ee83f8eb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/sys64.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/sys64.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902122/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cafa0c67-127e-5f78-b3af-fc27d9e9fba9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902123/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46fd4eca-f1cb-57f4-b714-cc906e81efc6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902124/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a31fa1e0-8c6a-53d4-846e-ea3c29e5f35e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/dmpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/dmpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902125/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c58f5b0a-f3c4-5040-af3e-3212743ecab7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/lg","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/lg']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902126/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73f568d4-9b1c-5fcc-8f65-ac2eab1d9f82","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902127/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be2e6f4-17c3-5c37-b638-ce897523c992","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902128/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9073ec8-7b12-51e8-8b1b-3b000bc0e434","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902120/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2faff88-1d29-574a-9bd8-cfa3e6601d52","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902118/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdb4470a-66f8-55f3-a8fc-9c5b779b0789","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902119/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c14200d-b893-55e1-a434-f69ca8c16a4b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://91.92.40.13/run.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://91.92.40.13/run.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902113/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f453270-5cab-5f90-8c2b-bc23229fb81a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/hnap","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/hnap']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902111/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc4bef72-395f-5eb0-ae25-440dd1fd9199","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/realtek","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/realtek']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902112/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca11ecf6-e637-5c00-84b1-6830523d3251","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/huawei","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/huawei']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902102/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83fb71a9-c54c-5221-a251-5b0cb605f407","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/zte","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/zte']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902103/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f042182c-b4a9-5b94-86ad-6ff7edf6a0b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/pulse","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/pulse']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902104/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a15b91e7-e195-5c8a-9c26-07c17a78e656","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://72.56.52.158/x","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://72.56.52.158/x']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902105/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d8bbde6-9312-5298-a2ff-e82f0e777219","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/zyxel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/zyxel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902106/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb191c60-5f1a-5c41-8903-193db6e0ede8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/goahead","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/goahead']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902107/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eddf6e0b-3e31-51df-8c92-864819986931","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/o.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/o.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902108/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b10c6bc-8a68-5777-9016-32943c89fd4f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/yarn","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/yarn']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902109/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--903a787f-3a24-5908-a4ff-e3536464d438","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/no_killer/mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/no_killer/mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902098/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f2f9c23-26af-51fb-97f0-a6c472a6f605","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/proxy/mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/proxy/mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902094/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c233135f-d412-5da1-a707-71ad614ed476","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/no_killer/aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/no_killer/aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902095/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed4487f1-55ba-550e-98cd-a8fcfcb11ddc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/i586","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/i586']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902096/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2031c0eb-cb4d-5d82-a601-55b7e33366fb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/nigger/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/nigger/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902097/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c45953d5-8d2a-5440-b46f-f5c82b161a3e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902085/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a150cdcd-fc96-55f7-962f-8259466e8590","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902086/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2679f203-c7fe-5870-887f-924973a62834","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902087/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0785c187-22b8-5df3-b0e2-2a09083f5fdf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902088/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--74181e0f-525a-5c4f-b75e-0dbeec603fd4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902089/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95c5c80e-271b-5981-b937-166b75b4b853","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/coke.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/coke.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902090/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e7a7059-cecc-5819-8795-12780d32e51b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/sharp.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/sharp.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902091/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9548d92-27a2-5b22-a0b8-e16784fc55de","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/toto.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/toto.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902092/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--790d0c7f-aece-581a-a582-c7384d694c2f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/jaws.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/jaws.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902093/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c4c17c9-3a7f-55fa-ae32-432281fa5f1c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/Sgsa","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/Sgsa']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902082/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7c5ac0ad-7724-52de-9a6a-04b4d3516bfa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.110.105/fSegv","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.110.105/fSegv']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902079/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5a4e430-7243-517a-b666-effefe747b04","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/fSegv","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/fSegv']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902080/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45fb1175-9663-50d8-a405-89b4da2161ca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.110.105/Sgsa","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.110.105/Sgsa']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902081/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6494f8b3-c30e-5537-aa24-928a0c02cfea","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.5.124.6:35918/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.5.124.6:35918/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902072/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c9f5848-7a0d-54ef-845a-1ef35df16a08","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.185.91.8:52353/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.185.91.8:52353/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902071/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfd518b5-4068-5a61-9bd0-30f3b6a4dd60","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.5.124.6:35918/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.5.124.6:35918/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902070/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--48cc6ba7-36f4-5939-90d4-fc570d488338","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.42.33.2:54415/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.42.33.2:54415/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902069/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3dbc8312-a9c7-5610-81e1-a2523e7f05b5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/armv4l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/armv4l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902066/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c88dec5e-5cf8-582e-9826-31c04cd97925","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/armv5l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/armv5l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902067/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2315c606-bcde-58d3-b43c-e328e8622381","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902068/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69f33804-482d-579d-977e-5f565a5ec68d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/armv7l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/armv7l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902065/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7e69c5-f602-5aed-a7a4-25e59dd0f6fc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902064/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7c5fdae-54f3-51d3-9d50-ec334e06762e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.42.33.2:54415/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.42.33.2:54415/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902063/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2589a87d-d68b-5924-ad0e-4f66d8436f74","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.247/i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.247/i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902062/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b4342dd-aefb-5c50-9a91-88a8381e6e38","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.56.161.81:37957/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.56.161.81:37957/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902061/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--168b6c75-b41c-551b-bcd6-90cd05fd2c2c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.245.111.51:60121/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.245.111.51:60121/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902059/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--809eeabd-353f-56d9-8760-ef15ad3f5709","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://114.67.87.14:60125/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://114.67.87.14:60125/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902057/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61b5faa-5280-5629-89b8-cc0a83ce4561","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.213.23.56:60134/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.213.23.56:60134/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902058/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91d44ee8-a1cd-5a63-a74d-6dca0cbd6b7e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.222.247.229:60132/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.222.247.229:60132/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902044/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ba55de4-92d3-551b-9579-165dadac5929","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.237.124.1:60108/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.237.124.1:60108/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902045/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--000b69ab-d0ae-5a2d-b5aa-fbd38c196419","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.237.127.21:60124/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.237.127.21:60124/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902046/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a53aba0-9acc-515c-98b5-c96b65a14d55","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.237.167.249:60128/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.237.167.249:60128/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902047/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af5773a2-82e9-57f2-b8dd-1762ac69fb5c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.236.180.235:60136/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.236.180.235:60136/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902048/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d384468-ec52-520b-9f89-a062f56785b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.241.116:60106/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.241.116:60106/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902049/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f12830a-c7f2-5db4-be92-a74dc4ed3d15","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.210.218:60139/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.210.218:60139/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902050/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71fe4758-b644-5693-8c8b-9b872196ff17","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.69.227:60133/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.69.227:60133/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902051/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0642ce0-bb81-5a1e-9f7d-b97020750eff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.169.170:60119/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.169.170:60119/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902052/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e3dce5-4247-5e0e-973a-fda57023ef02","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.236.70.102:60108/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.236.70.102:60108/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902053/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--57edc398-09e7-596f-9a19-6c3cb2354669","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.236.122.72:60123/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.236.122.72:60123/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902054/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a5a0f11-a1c5-5b1c-9fdd-acdbbf4f0756","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.62.229:60143/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.62.229:60143/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902055/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e15862f7-0e08-552a-b7b7-e7cb13ff79c5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.222.179.91:60122/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.222.179.91:60122/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902056/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7003fc71-4b12-5455-83dc-86925af07459","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.155.47:60149/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.155.47:60149/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902043/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a873545-e689-5d1a-8e41-bc426f25b7d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.226.68.236:60128/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.226.68.236:60128/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902042/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--60067c49-ff95-5372-99df-ea0b570ca3ff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.245.84.42:60116/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.245.84.42:60116/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902037/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--713dbfc4-348e-568d-b796-d02599d0966c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.236.28.220:60115/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.236.28.220:60115/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902038/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--530a3a7d-6e25-5125-9d24-1466f0ff0e4c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.236.146.147:60134/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.236.146.147:60134/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902039/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--288625d5-ad43-5535-8a37-0294942a9aaa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://49.235.101.101:60147/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://49.235.101.101:60147/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902040/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8913dac-8d66-5722-9fbc-399cf6956cf1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://8.219.85.120:60142/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://8.219.85.120:60142/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902041/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1d50356-6a12-55f6-a15b-8a24ce5957b1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.236.172.100:60117/linux","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.236.172.100:60117/linux']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","P2Pinfect","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902036/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c208f128-73ab-59aa-88aa-e45a2ad819c0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902028/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a9c704-c468-5ca5-ba86-cd9792518d76","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902029/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43a85c84-6cc1-5703-9e9e-5a2887eab74d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/dddd.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902030/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c16e4dda-eabe-5f84-99cc-987a1374a3a6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902031/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5589b30b-cb9e-58af-a690-5842b43577b3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902032/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e40fd3c-f5da-59bd-aaa1-7cd5b4113ee4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.spc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902033/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd4fdd74-b239-5c98-8bd1-f1ff63157396","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902034/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b51c6ec-8860-5f2d-99ad-beaea4ebcb61","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902026/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0706944b-b9e1-5130-b9af-f041633bccbf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902027/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a86c356e-4315-569e-b7d0-690770e192aa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902021/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa3f3281-0900-5e93-8328-f16b4a9b10d7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902022/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76561b7c-4400-5b82-b625-48111c5395b5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902023/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cbb4f3-647a-5a03-bd2a-dfac2f40cea0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902024/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9703202a-1111-510a-8cb2-8e1ce6050234","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://reavercncv4.duckdns.org/rva_bins/rva.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://reavercncv4.duckdns.org/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902025/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77d7dc9c-cadb-5296-b591-6f49bcf6779d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.56.161.81:37957/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.56.161.81:37957/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902020/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ac6c079-df40-506a-b0cb-2164867aafb9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.47.23:54371/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.47.23:54371/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902019/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d63cdb81-d499-5d76-9f2c-36980f0f293e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://alphalkenya.com/VSooNlFLuZpdMiw.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://alphalkenya.com/VSooNlFLuZpdMiw.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","exe","Formbook"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902012/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--752d5617-6bb8-5691-a6c0-c93d697130e1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902011/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dbb9965-192e-50e8-ab55-cd207116813f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902010/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbbaddcf-db5c-53a1-b520-07138a81b00a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/cli","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/cli']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ladvix","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902007/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a63d51a8-9758-5646-a150-b28c8709aef4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/Error84","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/Error84']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902008/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3204cc8-0997-5bdd-bff5-b338721cf2da","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/cliaarch","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/cliaarch']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902004/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaccf35e-eb3a-56da-9192-ace16091c2b7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/boss","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/boss']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ladvix","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902005/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87e83d0e-74ad-5237-ae88-20d100ddb752","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/main","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/main']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ladvix","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902006/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b89ffef6-10a0-5c20-b3d9-89100ca5da87","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.spc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.spc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901999/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--90c8ed74-01f1-5b02-9a42-3464a84b790d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902000/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee132f42-2683-5c91-910b-60927494c73f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902001/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af76c90-d18e-5259-aac5-f9b26b5b031c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902002/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0db61de0-4abf-510e-91fc-cba4f2c25365","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3902003/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bff17b33-ada5-58b1-9676-306fa30d052e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901990/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f941031-17fe-5452-b525-c50718b13b4c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901991/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4dc99c84-3d4b-5a01-90da-056bdbaa7531","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901992/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--238e0182-6615-54bd-aab8-2778a8b50dae","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901993/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--752c5e34-3b8f-5d88-aeaa-65ca0be767b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva_bins/rva.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva_bins/rva.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901987/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c925a159-99df-5447-b522-9d1b33849d5e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901985/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d8e127-67b6-5ec4-9edc-a2cd3b085a8c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/1","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901984/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e281c55c-a1d2-53e8-b6a9-a67b666f050b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901974/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efe1bdc7-9607-5fdc-a26e-6d2b10b5661a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901975/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c53eabc-d733-5f5d-91e7-f680dec0bea4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901976/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--590c892d-70c2-533d-ae70-ecdadcea1e2f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901977/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c284919-82e0-5ee0-999f-f6ea02541e2f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901978/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc0961ec-3aca-5af9-94a9-3afaafb693e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901979/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2acafbb3-3efc-53cc-a44d-7bd166ab9ae7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901980/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32c2aabb-7ae2-575c-b4cc-3eb970b2c603","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/traffaarch","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/traffaarch']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901981/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9d1deb8-3e26-5d9a-8526-fed37037ea1a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://216.9.226.120/nuts/bolts","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://216.9.226.120/nuts/bolts']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","CoinMiner","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901971/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebeb21ce-371b-535a-a96e-0dcbbc38b7b1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901955/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f64a62c-9cb4-5c9d-b103-aa406f3c2684","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901957/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de5c2b2c-758b-5b3c-ae51-f9f82a4da768","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901958/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc09311f-25e8-5d72-8c40-4b971847939b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901959/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64482c5c-3591-5bac-ae3f-3708951c7771","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901960/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33789cf6-3e31-5331-8806-05824650f3ca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/nvidia.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/nvidia.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","ladvix","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901961/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f6a3e4b-5ada-5caa-ac3c-55072145419a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901962/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92fab170-1c2f-5b37-84ea-4d37a575144d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901963/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--594f3896-3a66-504f-9be2-c95843d3cbfc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901964/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--014670e7-d2d2-5bc1-ab1b-5e2824da33f6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901965/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19052b7f-4c7f-5dca-ad40-77d8dcfdee2c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/traff","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/traff']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901966/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff845f5e-f5db-5cfe-bedb-b8d851bdba9a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901967/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2243068-58ef-554b-a4d3-392a9f05fef9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901968/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88756a0f-7cb4-520f-9216-2549dbcab8df","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901969/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cc0615b-fdb5-5275-ada7-03d6d77d978b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901970/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51f0ea43-cbc0-5cd0-ba8f-836c3b2f3d17","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901942/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--238c2789-23a1-561c-afcc-57e3fe971442","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901943/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f2fd86a-8331-5644-8b7f-fa3106826427","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901944/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3f42a28-2dfd-5481-aace-94536699417f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901945/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89a4c1cd-ae67-5e50-ae99-38044b7365e5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901946/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--655190b2-f789-530c-947b-b82590bfc99d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901947/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f9e5787-c8ba-53d8-86df-30a4298eb676","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901948/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d39ec16-8e98-5d25-9feb-eb380fe4ed60","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901949/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c3b159b-9286-5470-b3f6-5be0fe045fc6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901950/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53da56e1-f652-524d-ae91-a366330e7024","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901951/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28407c78-d5b1-57c8-a45a-5c63c3d092c3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901952/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d0a3b94-b7f0-5195-a1b5-122617a3e0b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901953/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--233264fe-41dc-5c16-b9f3-2c7b55206ef6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901954/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05b10af4-f88a-52ec-8975-0c10818f594a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901939/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd7160df-005f-51c4-bcd2-2ccfd08c9537","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901940/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52a5a111-d59d-570f-8aec-b43704aaf5c4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901941/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52e6a574-4275-5d34-b863-fb73b4101737","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/checkmacos.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/checkmacos.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901938/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b24b99f4-3207-57b5-a14f-697836b2b933","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/auto","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/auto']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901936/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6537898d-d2c4-5907-958b-b2282681f2d6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/dddd.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/dddd.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901937/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b38a5eb-be00-58a3-a3d8-8b2642a47e84","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901927/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--375d31a1-3ee6-5a5c-8a7b-25f23513fc1d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901928/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee70bd7-8db0-52a3-afc7-125eb13334f7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901929/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e32a859b-f6dc-5d08-ba7b-3affee82861d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901930/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--866ad17c-0c96-512e-b111-89f9f2a77ad5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901931/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--54f6427a-66e4-5b98-a29f-e5f07487be05","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901932/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6b3f10a-cbd2-5ce2-a29a-cd10e703c618","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901933/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d677ce28-f05a-577c-a746-9e6f4bae0ba6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901934/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aaebe8e5-edf6-5fcf-a129-289c63e0b236","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.187/rva.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.187/rva.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901921/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3245ef33-1fc2-5552-8b14-7a4058bb1f46","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901922/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad5290f1-5084-5c8e-9f7b-ef27c5cdf050","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/auto1","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/auto1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","ladvix","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901923/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca921ac9-40a5-50ed-8813-397c9bf212ae","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/check.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/check.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","ladvix","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901924/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d20e9676-8d61-5c2b-8dd7-5eba28eafe65","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.211/check1.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.211/check1.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","CoinMiner","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901925/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c13bd4d9-7af7-5885-929a-43a64dd0c00e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/LjEZs/spc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901917/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7d05f51-7aa4-52fd-9f2c-bf98e21bfa48","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901918/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f2e5827-d96b-5f19-b7e7-1274d61519a9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901920/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81f35bf3-d95a-54cb-9332-9e4946186278","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901912/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c62bece8-f1ed-5743-b9b4-1ac0d595d93c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.238/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.238/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901913/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b18ab584-427e-5808-a70d-ef0878122908","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901914/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f84f7222-528a-5680-8710-f79e50518d5b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.242/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.242/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901915/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f96feeaa-0f02-597f-94ff-4066575b6bcb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.241/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.241/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901916/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e287b69-39d9-5d64-b4ed-4fa3365415bf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://2goelectricity.co.za/MSI_213534.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://2goelectricity.co.za/MSI_213534.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901910/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ba89470-79a5-5098-82dc-b3143ea4a3c3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.121.179.166:53602/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.121.179.166:53602/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901906/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fb4169e-2210-5e6a-9fe2-2bdda86aa25c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.230/iran.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.230/iran.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-230","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901903/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b41277-64dd-5d48-908a-bdb5812cb8b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.230/iran.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.230/iran.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-230","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901904/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb70cba1-49c8-5654-9c33-8fb11c05551f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.230/iran.aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.230/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-230","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901905/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fee5ba25-ee59-527b-a588-750a6cc31955","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901884/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c022f33-e9e1-5f0a-b764-c6a34d872693","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901885/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d41b2e85-dc80-57ac-a8ce-461c66c6494a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.powerpc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.powerpc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901886/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3a7fab8-c669-5fdf-81af-8d07f76bfc2f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901887/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a2260ec-d793-5858-9673-fa26f785d089","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901888/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eb36de3-6f99-57a9-9afb-b82537c8638e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.mipsrouter","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.mipsrouter']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901889/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18af72ae-5b21-5e7c-8430-e8747e72d3c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.sparc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.sparc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901890/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--28698bd2-ae10-536d-96de-ecd2b1d22a74","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/telnet.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901891/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41057f8a-0b64-5ed6-bab5-dfcf4d4bac0f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/cat.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/cat.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901892/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81c892f8-59b2-5aa7-85af-a72bb81ff8b5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901893/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f466646-583d-5abf-97d6-a1629a7f799d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.armv7l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.armv7l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901895/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--406acc0d-b7e4-5a3d-838d-ffb5d36b9e21","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.armv6l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.armv6l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901896/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba8dfd6b-df28-50a9-b13c-7ab99f0b7ebf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901897/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4614450f-46f2-52c6-bfe7-316943f7a31b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.armv5l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.armv5l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901898/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b2a7167-1708-505b-b676-ff5687bc1adf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901899/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a61581f6-b628-563f-b950-a4a6407b1ee0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.226/iran.armv4l","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.226/iran.armv4l']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-226","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901900/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7cd262f2-ee7b-5963-8477-c4639c728f3c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.230/telnet.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.230/telnet.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-230","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901901/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36bb5567-4b18-5213-aa93-0dd56b83e864","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.230/cat.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.230/cat.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-230","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901902/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9ca7b27-a807-517b-a1e7-3c93057bf272","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/parm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901873/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7ee63e0-11bb-531c-87b8-70ce01342f18","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/parm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901874/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--093ddefc-00b0-56fe-b5fc-da3f5c51b549","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/parm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/parm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901875/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--998262d7-aa0f-5abc-b0eb-f9062907e2f5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/parm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901876/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a350a1a5-6dd3-56ad-8257-3956842307fd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/pppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901877/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45961c86-a26c-511d-a795-fe425f2a0461","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/psh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901878/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5f89e9c-7296-58e9-b4a0-2c63c36941ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/pmpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901879/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47ce0685-4bc6-5169-a1be-d3913f239550","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/px86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/px86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901880/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2979b13-f264-5a45-aa70-c472790db7ae","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/pspc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/pspc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901881/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa0d017f-4b53-5a73-b5ca-a64baf810daa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/pm68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901882/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ed39f0e-420d-5fe3-8afc-482a56d67d78","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.229/bins/pmips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.229/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-229","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901883/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebe1c159-a5c0-5561-af2d-cca54164b125","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901869/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e052e79-21f3-58ea-a0a7-2e38fc50d76f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901870/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7844542-e7b2-5878-a6e4-dc9adc2c7f9b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901871/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4da4d12-0991-50d6-8be0-ce1d90223c41","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901872/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d91e5d4-b699-58a2-8868-e1c038a8e785","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/tplink.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/tplink.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901862/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4ded13f-0a6e-5aa9-804f-69f05f666ed0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901863/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--577048c5-37e2-57df-b7d5-978ca0090cf3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901864/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a4b686-1870-5533-935c-5146159160d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901865/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3de5c90a-d955-54a5-adca-a585396bcfb6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901866/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41fc4835-36d4-561e-8152-d374a259cf2f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901867/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69d29f54-3926-512b-9bfb-40deb8f6f973","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.234/rebirth.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.234/rebirth.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-234","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901868/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3820061-4677-5d5f-8f7c-37df4719d146","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901861/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d79d0f7f-a46b-587b-bc12-8cbb89ee0755","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901847/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97459d18-e388-5b65-8a52-49f7c44b2988","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901848/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbdd253f-5d5d-52dd-a2fb-619d4eae6882","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901849/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b03d4898-c06a-5622-8cd0-014b2da2bd44","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901850/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d7a0ce3-7431-5e5f-885b-ed535ccf4b3d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901851/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--360d1f09-742a-5d60-a0e2-dadc6a4f2618","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901852/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--485b3297-d23c-5583-ba3d-eb9533b2a993","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901853/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7a897b-dfcf-5d1f-8fc0-0531f367cdac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901854/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80aa6981-5972-5811-95fe-ad7123e45b8c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901855/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62335f8c-3ddd-55ca-81e6-17aa83b24b84","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901856/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f21eb27f-3708-56c9-b732-7017b2bf0a6f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901857/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94b22322-03c4-5a15-bae9-b9d0e8fa5ad4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901858/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e9ed10b-88cf-539b-a383-d4108d38288c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.236/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.236/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-236","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901859/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d08130a-3a84-5053-8e3d-a3cc1c252ac8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901860/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1deddcb5-688c-5919-8cc8-d7ef62cce350","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901836/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97ab9043-6f7a-5fb4-a769-e4fe46d19a3f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901837/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2197a5f-0ece-5f85-8f85-a30ffb67ec61","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901838/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1aa5ab7-1589-5e58-b353-7e7b304908d8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901839/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b04649ce-bd5a-5074-828f-0511398723f2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901840/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c898283b-cbf1-5847-a8c1-8af307190898","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901841/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fdd4bcc6-9df5-5793-84b2-da3d16867145","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901842/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f804636-ca19-5224-a58e-f5cb7b494a15","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901843/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e967fc0-1282-5d38-961b-8c22aa891b7f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901844/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c5368fb-973f-5256-bd8f-f81677cc4c2a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901845/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebbb600c-0586-5942-86af-876def0889a7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901846/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--478241ab-1efe-570e-b1e9-99da20366d10","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901833/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1b19f5f-7930-53ee-93d9-259bad921d6f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901834/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de662a7b-9248-5f06-bd65-154818a0b78d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.240/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.240/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-240","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901835/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70f4bfd2-aee8-5f44-8ab8-4fb0b7734f13","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901828/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5ab1ad-764b-537b-9c37-8abf8e22cd11","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901829/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb2c1aef-0830-5cfc-87c3-e9a37ccd86c3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901830/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8553193e-ed81-5337-af16-aa54f79878dd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901831/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5832f85f-fd92-5e00-90bf-d930a60ad235","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://39.74.53.25:55617/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://39.74.53.25:55617/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901832/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f058f48d-8873-5fa9-84f9-7d3ea9a2f671","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901819/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d7f9541-044d-5e50-a6d2-f5e6967d2ddb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901820/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--088bd457-a79c-5cb1-8f3d-d6f05e1049a4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901821/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5106579-1dab-5f68-b7cf-7de3b5b13a3c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901822/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2048ba92-0f96-5428-bd75-1a6be99ef5e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901823/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cf0fa8a3-f4f7-58cc-9cd2-7bad5a45539b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901824/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a192ac1e-32a1-54a6-9291-2acc2ab761a9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901826/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0375cda-973c-5028-a501-0feaef444a7b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.244/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.244/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-244","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901827/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e3cb925a-399a-5f7e-bad4-972b564cf319","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901818/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--101883c2-2f24-5051-b619-ca2a58e76898","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901817/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b164443d-9e5b-5067-bf36-eb3b6a4cc63a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901808/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac5b5e5-e9a2-578f-b867-fad3412ca361","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901809/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--be1d98cc-73a4-5bd1-9207-7bee5c07057d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901810/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5683226e-b9d4-5c6c-924d-1935b5b0b477","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901811/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b59a819d-0949-5e15-adfa-fa6ada866f71","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901812/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ef5d8f0-2c1e-5ea8-a808-b11a6e9d4d12","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901813/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee75fbe7-d933-5349-8f0c-756a173eeaaa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901814/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53199775-1492-5009-b4fd-9201d166df5d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901815/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc583763-d3cc-57fa-ab8c-59c790ab611b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901816/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e96f7d-8412-5c3a-983f-9ec3572b72b1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901800/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--441b0f13-59f0-5f6e-9f27-e71840f3001f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901801/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f800d00-db66-53cf-87c1-370276540594","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901802/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d910998d-1de2-5be2-a15e-25c4a9812dd8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901803/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea313ca6-2fb0-5be9-bb7c-2612a394d51f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901804/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e277100-029d-5b9b-8016-151ef022ab60","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.237/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.237/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-237","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901805/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5424ada8-c22c-51b9-9206-7e6acec65fd0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901807/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91458474-3e45-5a26-8452-5f14d4219be0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901796/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c8624ce-caf6-51d7-82a4-546e11e2f21f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901797/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a4fe420-e697-58c9-8aeb-e9723fdcfdc7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901798/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a78cd6b1-e81a-513b-a430-573f467ead16","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.i486","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.i486']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901799/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--def1acfe-0fdb-526e-bfb7-3353b41c6f7b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901794/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--389939b2-8eae-55c8-92ca-bef5d0311693","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901795/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4cbd76d9-4032-51ea-bcb7-9bd1252d7764","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://89.189.181.54:34451/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://89.189.181.54:34451/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901792/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--625bb95f-ccb6-57a6-bf47-5484e246409b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901793/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43f9aa96-0342-56e2-a9d9-7dfb43758230","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901790/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f739adc6-723f-50bb-a223-f93579923a9d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.243/static/js/sdfjgnjsdf.arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.243/static/js/sdfjgnjsdf.arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-243","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901791/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f63b594-6f52-5b28-a8b9-7c9364cf1824","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901788/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a912df6-c988-5550-986e-fdd48bee1956","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901787/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15aa21ea-ec72-55dc-845a-6374824d4e41","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901781/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a765393-6822-5935-a434-260a2add1778","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/pmips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/pmips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901782/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855d59b-e27f-567f-8644-32c6939929d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901783/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1842af83-9c60-5ccb-a581-92f036060f1b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/parm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/parm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901784/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1e44a0b7-f8be-55d7-9442-c06a3fa63875","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/pppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/pppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901785/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b733aa60-79ea-511e-b5ae-b98e0eb6f344","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/parm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/parm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901786/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf98a63e-a1a0-5f78-ae87-b62717211523","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/parm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/parm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901772/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae9e474c-e5e1-539c-8dc8-2e09c1d319bf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901773/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--826681b4-2416-52af-8e40-c205bee4186c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/parm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/parm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901774/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0c5bc20-5d9a-5822-bf19-b1b9246c84f7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901775/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72c959bd-b1d1-53c5-8ac4-8f15180ccda0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901776/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82182df5-41c9-506e-9eec-07524355e1df","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901777/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--feb9f01f-17c5-5937-b5f1-e83f33eff9e2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/parm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/parm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901778/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53bf6330-5ed3-5e00-bf96-0e72a17384ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901779/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c449bbe-0117-5174-8095-8f6179ac5d1a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901780/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b1158e3-cfe9-5f91-bbbd-6d69d3f62ca8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901771/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f79ed0b-65f6-55b8-8ccc-9165fc872939","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901770/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6a18fca-7c3e-520c-9eb2-f86e540e497f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/pmpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/pmpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901758/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c68d0b5a-a384-5fa9-ba52-9caf9dbdb9e2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901759/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7676783-1532-5d35-ba85-2b4c2a468b2a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901760/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0caae928-04a1-53c6-ba94-bd2e07883f10","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901761/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47ae53a5-f3ef-5093-9aaa-bdeeeba18c28","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/psh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/psh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901762/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--970939cb-c194-5bea-9978-88b835e50425","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/kla.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/kla.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901763/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97d3a65f-40bb-5de6-9873-0272b6821170","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/kla.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/kla.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901764/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a7a574a-3232-5efc-827e-1c5eb1a386fe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901765/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e38b055-5dfb-52af-8a60-922b4a9d886d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901766/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3e800fed-67c2-5b67-ac68-fa5da6565546","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/parm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/parm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901767/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc550f57-2136-583a-9502-829d3c4cab8d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/pmips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/pmips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901768/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c83dfe-2eb8-5ef6-86ba-9f68a4ed9f4b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/parm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/parm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901769/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65634216-adc3-51d7-bdb9-030dea13419a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/pm68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/pm68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901756/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ba9af0d-d5f8-57ff-8be9-c962e1dfc6eb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/bins/px86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/bins/px86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901757/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10766577-9d22-5958-b9b4-d3d2af7ecc8e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/parm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/parm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901755/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a509aefa-2366-5f86-ad30-6dc1aaefee53","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/psh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/psh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901749/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bfc25ec-45c8-5382-b178-c754236d7829","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/pppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/pppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901750/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2201093a-a595-59da-b91c-245d8c76181f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901751/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c3fddb0-cdcc-5b05-8fe5-7256ccfda012","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901752/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68358fc9-8bdc-575d-877d-b2b92de317ca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/pm68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/pm68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901753/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a453bf3e-ef97-5887-83a6-473d1efb5626","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/px86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/px86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901754/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f094c31-641e-545b-97b9-abb45de180c5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/pmpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/pmpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901748/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--672cfa75-e2cf-50ec-b07e-87a5ec76f474","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.196/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.196/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-196","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901747/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12f10740-70d7-54af-adca-d3e89218add0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.121.179.166:53602/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.121.179.166:53602/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901746/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1b8e6533-dc03-5d13-8a58-4029eb2206b2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://196.189.35.172:40485/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://196.189.35.172:40485/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901743/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59f09b8f-1c07-5b46-bcd1-d64320b310c4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://rcf.co.mz/Volcano9.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rcf.co.mz/Volcano9.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","exe","PureLogsStealer"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901742/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66328c3e-4c25-5c04-907c-af24bd6e34ec","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://seniorsushi.com/PPK/RAWFILES.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://seniorsushi.com/PPK/RAWFILES.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","exe","opendir","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901741/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae5dd292-0647-5a99-a4dd-9bf9ea60d84f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901737/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27f64b16-83d8-5a60-bc65-1815e3b83faa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901738/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27142362-2cb1-53f0-a81d-5196a08c142b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://api.mineblack.lol/bot.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://api.mineblack.lol/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901736/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a054649a-9f55-5909-b6e7-3d88e95b5156","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901733/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a604db7-f753-511b-9062-1720d7d429aa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/x86_32","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901734/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47085d4b-c887-5087-8148-49239bc0dd46","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901735/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3309fe4f-0506-50e1-82b6-4f6d63e3a6bb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901728/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc712023-0ca4-59fa-a0fc-5b124495f744","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901729/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff422584-08c7-5e98-a98c-616882aebd7f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://219.155.192.208:40793/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://219.155.192.208:40793/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901726/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69bda83d-f42d-5903-8be6-557d8ca6ce95","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901724/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ce221c-4789-5249-b6f2-f626d04cddf7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901725/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf779871-d5bd-5209-9f94-4eee0b636a7a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901722/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ade6979-98fa-5edc-b56e-62713887ad71","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/tvt/mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/tvt/mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901723/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--441817a2-893a-5a52-8b43-2606680921a6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.14.43.20:36177/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.14.43.20:36177/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901721/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ace1b45-e025-5f76-88cd-dee775ad43df","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901714/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5a1c692-3aeb-522b-b2e4-fde1c7443115","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901715/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49087531-188e-5f67-990f-0e04f2dbeccb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901716/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c903c4d2-352f-5d39-b187-8bd456c5110d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901717/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--404cf543-6326-5bf1-a65d-04d34c1c99de","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/bins.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/bins.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901718/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cd9d5b83-e15f-512f-906a-4cb4e19240a1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.166.194.8:35798/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.166.194.8:35798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901709/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5ef70e7-d86f-518d-b90d-fcd1a21be817","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.252.159.78:57590/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.252.159.78:57590/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901710/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0267190b-86c5-5b7c-9e3c-94cca12ce070","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.215.44.220:42289/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.215.44.220:42289/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901711/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9f917ea-2870-5e99-abe7-7305a92ef845","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.110.61.156:54807/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.110.61.156:54807/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901712/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--268ebae2-93cf-5156-9552-a4d0f9d96155","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/ppc440","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901713/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--295aac54-3503-5d91-9ce4-98a6a76a3635","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://219.154.181.58:50132/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://219.154.181.58:50132/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901708/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e3b0e2c-4ace-5313-a7cf-bfd459d7f373","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.48.149.86:37512/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.48.149.86:37512/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901706/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7bc63f6-3d98-5ab0-8be8-f45770508011","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://219.157.52.254:39042/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://219.157.52.254:39042/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901688/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ca5902-7c22-5c94-b527-b9826cd87e9b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://136.60.32.162:36863/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://136.60.32.162:36863/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901689/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9476042-a475-5edb-ab56-26c360ce17d9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901690/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce47f686-c8c8-5468-8b6f-c4bd5e3683e9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.113.201.103:43353/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.113.201.103:43353/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901691/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15a85963-8ea8-55c5-a161-e74a657177be","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901692/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7142a02-0e63-5d92-9237-58de554612ee","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.179.254.223:44858/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.179.254.223:44858/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901693/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e31e9b56-642b-5a58-82e6-13d100803010","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/x86_32","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/x86_32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901694/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53d966e9-7b48-59d6-9e39-02070f847a9e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901695/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2350e6-bf23-5a73-b525-2253407cae89","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901696/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a61f651-ad43-5dc4-90fb-064eec0d00de","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.1.226.175:38386/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.1.226.175:38386/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901697/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04673ced-5740-5f44-b9ce-febfdc902f9e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.127.154.48:44547/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.127.154.48:44547/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901698/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2efa9547-ad1c-5e59-bd77-70d64f1af88c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://110.39.249.174:41741/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://110.39.249.174:41741/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901699/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a06b5e-091c-5484-ad74-a6c0e30994e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://116.149.19.3:33747/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://116.149.19.3:33747/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901700/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ee8aca1-9c95-5730-9bc4-355645dd7f3e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901701/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31bb3117-43ae-5f80-814a-dc642f4427a8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.114.198.5:48196/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.114.198.5:48196/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901702/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5418593f-fafb-5e3e-af93-40f4dd7f8472","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.110.61.156:54807/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.110.61.156:54807/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901704/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25dee744-3c23-5cd6-a1c3-4f9de995f92b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://api.mineblack.lol/jaws","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://api.mineblack.lol/jaws']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901705/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06f966cb-134d-5cfd-ae66-6004be3a7de4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901680/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e61bffb3-1bd6-5cb1-ab27-91178c8e0b20","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901681/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1fa92d37-a699-5a4e-891c-11fc16a5dc16","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.109.140.49:40757/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.109.140.49:40757/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901682/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a512f218-6bcc-5d00-892d-0d6dea600f60","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.50.150.5:40794/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.50.150.5:40794/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901683/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf444834-1dcb-527f-9fc8-b74e7dbcfe18","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901684/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--969abf30-ebeb-531c-acb7-46ddc167d0e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.148.236.155:60439/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.148.236.155:60439/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901676/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1edddb8-f43b-5bfa-94c9-86ec926fea06","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.148.236.155:60439/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.148.236.155:60439/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901677/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d402452-5f37-55c6-9958-135346b7446d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.173.78.13:52046/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.173.78.13:52046/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901678/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8ef9682-3873-5928-82a7-0209af4429b5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.147:33487/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.147:33487/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901679/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0596f52b-d9e2-5ce6-84d5-8953ddb0f305","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.235.174.78:56482/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.235.174.78:56482/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901669/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04b3a6d8-b7ce-5002-a5e9-f34a2f6551ef","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://120.84.215.125:39910/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://120.84.215.125:39910/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901670/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f20a772-f377-51c7-9af8-a49289b500d2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.215.126.58:44400/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.215.126.58:44400/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901671/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b599d142-b1d6-556c-ae5c-cceaea68485c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://110.39.249.174:41741/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://110.39.249.174:41741/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901672/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a3ae8697-c785-577c-beea-a7852cd42bcb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.55.246.222:57542/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.55.246.222:57542/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901673/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dfccb96e-f25c-56e1-a7c9-9f90645e1ee9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.234:49323/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.234:49323/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901674/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75a57973-9b49-5900-afc9-1b9f812cf5e5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.235.75.164:57996/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.235.75.164:57996/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901668/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b362544-c7c7-57b7-993a-2ac661726639","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901667/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f982bc5-c3ce-543d-a9ab-c6be9449bb1f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.86.172.171:41089/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.86.172.171:41089/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901659/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95820b2f-9053-58a2-b6a7-8a8638226f1f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.166.194.8:35798/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.166.194.8:35798/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901660/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb6258a1-4d35-590e-be43-9410c717a075","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/ppc440","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/ppc440']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901661/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0df5d8e-1a9a-5a62-8f63-c7054ab37ee0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.54.158.77:42338/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.54.158.77:42338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901664/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c482e7-2af5-5b3c-b34d-fa7755fe0741","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.204.233.111:38853/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.204.233.111:38853/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901665/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fabbd2f-7a8b-5dfc-980a-670c399dcfa0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://196.189.98.110:33070/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://196.189.98.110:33070/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901651/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--238a078a-be76-5e00-baf6-b45bbafe2cdf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.100:38107/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.100:38107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901652/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58366ddb-4050-5326-bdf1-69663e1d486a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/x86_32","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/x86_32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901653/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec4a3c6-d687-5e78-93bd-02e82cf438e2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.41.226.101:43998/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.41.226.101:43998/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901654/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61d5ef38-8109-55b8-8c54-fd978e4a8e27","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.137.197.66:51494/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.137.197.66:51494/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901655/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78dc1ad5-f2f8-5af7-8ac9-b725217ceada","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.228.216.110:54566/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.228.216.110:54566/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901656/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71afb56b-9089-568b-a080-f1aba897e177","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.14.193.241:34414/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.14.193.241:34414/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901657/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a0449b-9c36-5f7e-9994-4739068594a3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.127.220.233:54104/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.127.220.233:54104/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901658/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9df0f54e-f07e-5492-bc30-55b1771f046f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.12.30.36:60566/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.12.30.36:60566/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901645/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2151f94-d375-5acb-8148-46f548654dab","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.167.85.100:49899/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.167.85.100:49899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901646/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38034efc-5fa1-50cd-af8a-9141a295c582","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.93.138.83:40373/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.93.138.83:40373/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901647/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8b09c94-ec34-5d12-ae83-8517209350f8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://120.28.194.160:52311/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://120.28.194.160:52311/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901648/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c85e5502-3ba6-52e3-bf79-83a3a1d0fe0f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.113.201.103:43353/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.113.201.103:43353/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901649/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e811f28b-9b48-5c0b-87f2-cc15a456adc2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.230.81.126:50462/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.230.81.126:50462/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901650/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d90a0ddb-8f9a-55af-9683-7593ac2cd7f9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.202.17.138:38962/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.202.17.138:38962/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901644/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa13392e-31b3-5e91-8234-2fa37e25fdfc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.52.146.164:54323/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.52.146.164:54323/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901643/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43ad057b-013a-5e40-9d9a-b68b57735680","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://205.237.110.232/tvt/i586","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://205.237.110.232/tvt/i586']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901639/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43fa37d0-0a4b-5381-81cb-b26c8e45e237","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://219.154.181.58:50132/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://219.154.181.58:50132/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901641/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--676531db-32ec-5905-9fae-20377a255bf0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.49.114.109:46437/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.49.114.109:46437/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901642/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dab44c2f-fa7f-5349-ac79-2bbf81366239","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.234:49323/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.234:49323/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901626/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa68be5-e3d9-500a-9122-80d24b9b89ed","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.230.40.119:58107/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.230.40.119:58107/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901627/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9ebc1dd-58d6-58bc-951b-3d05de6c6908","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://86.98.154.146:19091/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://86.98.154.146:19091/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901628/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64195c28-c311-5299-bc6f-5d91eb98fdf7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.21.31.81:59239/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.21.31.81:59239/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901629/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9fe007-671e-5f0c-b1b2-8236f3a3855a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.179.254.223:44858/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.179.254.223:44858/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901630/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8510407-d8c1-5810-bb3e-6ba344fb847f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.147:33487/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.147:33487/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901631/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--97907462-9cf8-5a1b-927b-ec47515dd501","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.8.90.59:40206/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.8.90.59:40206/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901632/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--07e193ee-3f6b-5df0-a834-e30d4184d920","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901634/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59731497-8c98-5f41-953a-a9d71f9ec514","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.106.68:36906/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.106.68:36906/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901636/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83546c17-869c-5ad8-83b2-53d84900667d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.43.107.232:46123/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.43.107.232:46123/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901637/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a92404b1-4f52-572f-89d1-44643f378532","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.56.159.152:47624/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.56.159.152:47624/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901638/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e20d0a4a-f0a3-574f-9d86-103dd31ddc63","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.237.52.185:33904/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.237.52.185:33904/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901621/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bfbfc7d1-6115-5421-b24a-2f890fee9929","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901622/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de7ed3f8-0d8d-5fe7-86a1-f9c9aba9454e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/release/x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901624/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4f0382f-85a4-5b4b-a4b0-4f9bcebfebe0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.172:59880/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.172:59880/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901625/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6aabe2e8-52be-5e05-9075-a302c443cf86","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.219.14:47408/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.219.14:47408/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901620/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e0df304-7961-591a-8b58-33fc69df7441","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.127.154.48:44547/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.127.154.48:44547/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901616/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1eb69452-4c9b-524a-9b71-e2092b07a338","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.167.85.100:49899/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.167.85.100:49899/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901617/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--818bb7a9-a783-51e7-8826-53bf286e10b2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.121.180.159:41148/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.121.180.159:41148/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901618/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ac2d314-01f1-52bd-b4cb-1d6fe6739eeb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.230.40.119:58107/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.230.40.119:58107/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901619/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ca23436-5a98-56be-a96e-1ba6a1232c97","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://120.84.213.21:46712/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://120.84.213.21:46712/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901608/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63612c0c-a20e-54f8-8ef0-aca2bc8e2c48","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.180.66.105:43207/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.180.66.105:43207/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901609/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1ff6544-dc2f-5728-b936-c5aea3574666","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.137.214.37:48901/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.137.214.37:48901/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901610/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7815401-7cdf-5867-860f-4c59b9db8c69","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.121.106.64:52025/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.121.106.64:52025/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901611/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d652f25-ff66-507a-83c0-a33a48285383","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.127.220.233:54104/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.127.220.233:54104/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901612/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3c6b9914-0bf6-5f91-8d88-eb8ea7f2aed0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.224.175.231:41660/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.224.175.231:41660/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901613/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5ef6bb5-514e-55d8-9ca0-6bd4276260ab","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.202.17.138:38962/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.202.17.138:38962/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901615/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92054b3b-94f5-58e5-9f07-4261960f9709","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.1.226.175:38386/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.1.226.175:38386/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901602/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0248df85-ffad-5616-a9c0-d503674294b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.116.39.158:45878/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.116.39.158:45878/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901603/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfc19b3b-b485-5360-8b39-5267dc4eee38","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://124.92.80.153:35984/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://124.92.80.153:35984/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901604/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--936228a8-606d-58fd-b0b9-7f9594927485","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.176.120.191:54769/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.176.120.191:54769/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901605/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c221afa0-b68d-54bf-9009-55eb5fedcb7a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.172:59880/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.172:59880/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901606/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0585b64b-73dd-57ba-ae68-5ca1ba30d79e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://1.20.91.236:53593/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://1.20.91.236:53593/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901607/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a634d3b8-8166-5b3b-ba43-eda7b92f6faf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.189.160.169:47495/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.189.160.169:47495/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901601/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--899a5fe6-a12a-5765-8f10-481f28697bea","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901600/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9b7ad2-d3b9-5065-8015-6fbbe9ef8148","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.43.44.201:48800/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.43.44.201:48800/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901585/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--833548fc-e784-5e3d-9886-118394d96751","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.215.44.220:42289/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.215.44.220:42289/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901586/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1da68c2-8e54-5629-a6fb-7900e2f928b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.55.246.222:57542/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.55.246.222:57542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901587/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--411bc572-91f8-5f20-85c9-28a7377a370f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.126.95.214:33968/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.126.95.214:33968/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901588/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b91936ec-abef-5073-bf3d-a04cc0795ef8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.8.90.59:40206/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.8.90.59:40206/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901589/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72d7e9c9-4c22-5acd-96f2-9e66924aaf15","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.165.236.61:47227/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.165.236.61:47227/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901590/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1767214-2c7b-5b5a-8bf6-4f69f0c2d59f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.106.68:36906/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.106.68:36906/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901591/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--469b8a84-39a9-5d80-bf50-7b6eefd025e9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901592/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8a2a1d3-ef0e-5869-86bb-83af255a55a0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901593/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--34084d3f-2758-52df-9709-821aa513028c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.43.44.201:48800/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.43.44.201:48800/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901594/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f4836ac-2544-5bbb-afe7-d39a51f15c9b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.56.159.152:47624/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.56.159.152:47624/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901595/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eca895e-5567-5158-b9f9-7ff04aeec34f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.40.158.110:41707/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.40.158.110:41707/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901598/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7383105f-e5f3-561b-98e7-280472605f39","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://213.66.220.87:50871/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://213.66.220.87:50871/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901574/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd9d907-7c6f-5313-8c76-80de83d81788","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.54.158.77:42338/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.54.158.77:42338/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901575/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd20de8-ddd2-5a8b-bd92-18fac9fdd1d3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.41.226.101:43998/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.41.226.101:43998/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901576/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a16fe79f-ddac-5f35-bf1b-3ec7a99d9535","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://110.37.106.220:47631/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://110.37.106.220:47631/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901577/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3fe4edda-eead-52cd-9e08-2ab646fead48","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://140.237.36.213:34302/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://140.237.36.213:34302/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901579/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd6d57a9-f6e1-526e-8b2d-7060eadd2d7e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.63.50.235:56719/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.63.50.235:56719/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901580/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e2cf7b4-f201-56f4-97bc-1241e8475d92","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://37.52.247.235:47637/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://37.52.247.235:47637/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901581/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ede6edb6-32d0-5cbb-8f29-e5bfd7cb8721","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://voltagec2.tech/release/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://voltagec2.tech/release/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","botnetdomain","censys","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901582/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f448ad3-ee8b-5fd8-958d-fd97afb5965f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.233.65.130:37441/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.233.65.130:37441/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901583/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d5e12ea-e14a-53cb-9f70-251985c43ec2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.21.31.81:59239/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.21.31.81:59239/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901584/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--562edbba-63d3-58f2-9a92-09752d00191e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.121.106.64:52025/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.121.106.64:52025/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901572/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2562f796-7dce-5db6-bdcd-e06ed10c7ccc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://196.189.98.110:33070/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://196.189.98.110:33070/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901573/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e7f93f2-6b73-5083-b0f2-89600898b017","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://213.66.220.87:50871/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://213.66.220.87:50871/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901570/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc180c4f-14cf-5fd0-898f-056f22a1bc53","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901557/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a05baf-8b1b-53a0-b9dd-f9744c908586","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901558/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58540daf-04db-526b-97db-b9a020ca67ee","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/x86_64nosl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/x86_64nosl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901548/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7a99e1-54b5-53c1-9f0b-867371153519","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901549/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa193743-6b3c-5b04-a331-18758c3c5c55","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901550/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e92dc91-c61e-585d-8083-967c99268365","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901551/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9cd2e1f6-1e0d-56a1-8459-2a96e2dc531b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901553/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95125963-75f9-57eb-b8d7-ade1f4c0edf5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/main.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/main.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901554/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c80804-8622-5d60-a208-7f727cf51a70","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.spc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.spc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901556/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0d41e3a-682f-5a17-a2c0-a9517193a327","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.i686","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.i686']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901547/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ecc426c-493d-514a-9a92-7c9cd1460019","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/a-r.m-5.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/a-r.m-5.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901545/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40027d3a-362a-5f1b-95ae-a0ac8cc96144","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901544/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fa1de50-acac-54b6-b9d1-860759d3db4b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/s-h.4-.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/s-h.4-.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901543/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6a49caf-ee09-5114-909f-643b7cc09a71","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901540/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aef7a42-c92e-5086-8ff0-6ea0e676508e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901538/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--78326042-7d47-5087-9b2c-67f004bfcbcf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901537/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50e4c897-92b8-50cf-9efa-cabce836e948","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/i-5.8-6.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/i-5.8-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901535/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d54e783-9ed4-5de8-b9c0-7c477882990c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/m-p.s-l.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/m-p.s-l.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901536/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18e8f139-eb6e-5970-a03b-2be08ec9337b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901520/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c36f76a-25af-5619-b5f4-be0720c45419","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901521/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ef5a198-aa02-5ac4-a8bf-a03210adcf56","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/m-6.8-k.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/m-6.8-k.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901522/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--13dd54b4-bb73-57e6-a29b-af8c5a6b3bfb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/p-p.c-.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/p-p.c-.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901523/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d109312-7cd8-5c18-ae47-3866ba08a73b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901524/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c83ed13-1e90-51d6-a9fe-b16e6953eeb9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901525/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5682f32-dab2-5b69-9dd5-7310aec43923","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901528/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8216617d-eaad-59bc-a0ad-6319d9d86a35","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/a-r.m-4.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/a-r.m-4.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901529/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d0f3ab2-910d-50f3-a69e-64acc9d3b881","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/m-i.p-s.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/m-i.p-s.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901530/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2aa0e7-1a65-56c3-aeb5-17313f625ecc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901517/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89dd4c2b-8ec9-59c4-b464-3e18fd89df42","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901518/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32fa026e-2b3f-5703-9de9-ff648481a0de","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901519/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e58a9070-a786-5d71-a92f-350ac771f8c5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/spc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/spc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901513/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--875a548b-f73b-5684-825b-b7382e4238c8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901515/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b8df1d5a-de6f-5838-8960-8c118569f26e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/a-r.m-6.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/a-r.m-6.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901511/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f4dd7a01-6fd7-5c8c-ac03-af617e89e87b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901503/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ba2611b-e4c4-54e3-86ac-47e6fce5df8d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901500/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7ea52c39-b7ed-5003-8ab0-9c031e492622","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901501/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec222f1b-4902-591d-9d3f-abe798f5be6f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901502/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0280251-a193-5a55-9a35-25d90d152102","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://181.214.136.12/hiddenbin/Mystic.ppc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://181.214.136.12/hiddenbin/Mystic.ppc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901497/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--02ad79c9-c9e1-58c5-bc30-c69e1c80d12c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/LjEZs/sh4","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/LjEZs/sh4']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901495/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67d2c7aa-ce91-5a2e-abf2-dc468dc92b5c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/d/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/d/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901496/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edda0791-efc3-5be9-a448-e879f15293ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.114.194.171/t","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.114.194.171/t']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901489/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c697162-e62b-59a1-bae7-93a20ecb56f3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/0x83911d24Fx.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/0x83911d24Fx.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901478/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7898b7e-9c14-5a49-82d1-d7b0162a62aa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.199/bins.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.199/bins.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901479/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1d2b7273-6a1b-510f-856c-051341ed0955","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/d","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/d']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901480/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcb8f621-1fff-5bc3-ba3a-c4fdf95b6594","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/jaws","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/jaws']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901481/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b130c4fa-3693-5e02-b84c-8c7f4bf0f2a8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://31.77.227.111/ohshit.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://31.77.227.111/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901483/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f81685d9-06f8-5e6f-8106-ed7a45aa6003","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/bins.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/bins.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901487/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5a73855-6d12-52c7-b3d4-c81eebaac6e6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/Sakura.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/Sakura.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","gafgyt","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901477/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a100d63-ba11-5d60-91a9-9b144f62cdf6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/a-r.m-7.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/a-r.m-7.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901472/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29b831a8-1e5c-5885-9700-cd222e588ce0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901473/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0ddd503-5cf8-5d90-8c94-5fc3b12c406b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/m68k","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/m68k']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901456/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f11dffd1-eae2-5b67-9c99-667aed3f21ed","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901457/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2cb9980-8c68-5765-9262-c34810ff94b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901458/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c1bfb3b-f072-54c1-a151-a9fa29f2b57c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.154.43.97/bins/mpsl","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.154.43.97/bins/mpsl']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901460/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0b01c45-6a4a-5056-b9c5-297e10f492a6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901461/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--687a4873-dcb0-50da-bcf9-7705ea37fd0f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/x86_32","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/x86_32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901462/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b98e462c-037a-509f-93fd-e49ac604598f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901463/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bc48d19-8ce5-5aa3-a5f4-410d28578a27","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/arm","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/arm']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901464/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--324f6900-41ae-5ca4-922a-c32358027c24","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/aarch64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/aarch64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901465/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00d3dcc4-7fd4-57f8-879f-653b02c873a5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.118.132.61/x86_64","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.118.132.61/x86_64']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901466/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93aee3d4-b5bc-5604-bf3a-f1b5645a8833","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901467/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01bcfc24-b744-5529-bf50-87618bfae3f0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/x-8.6-.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/x-8.6-.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901468/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af0425fb-0b7a-5fc7-a18b-8ee56a6a5878","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://62.84.172.106/dlr.arm7","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://62.84.172.106/dlr.arm7']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901469/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b042f97f-74ae-5dd9-92ae-b13ab557f445","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://23.251.34.31/x-3.2-.Sakura","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://23.251.34.31/x-3.2-.Sakura']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","gafgyt","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901470/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c32eca79-f663-57c2-9dc6-00f0d1b8478d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.255.97.21/bot.x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.255.97.21/bot.x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901471/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10a4662b-44d1-5ee5-bd9e-12911705a76e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://long-wildflower-b4f5.gustavosoftware.workers.dev/kxYzN']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","xworm"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901454/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--222ade94-725b-575d-b566-dede57d5cde6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.5.204.221:40942/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.5.204.221:40942/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901450/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b490e32d-182e-55f1-a723-6dbb65d184b2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.5.204.221:40942/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.5.204.221:40942/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901449/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--473bf9d1-2a85-52b4-96b0-ae2b353e798f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://signageinsignia.co.za/kizzy/1.jpg","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Formbook"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901448/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a053e948-2a75-51cb-a8e8-4b717b1235c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://verdiva.life/admin/MSI_PRO.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://verdiva.life/admin/MSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901446/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--616e8b80-0ae6-5f2c-a772-fda6860826ba","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.172.254/img/img_050827.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.172.254/img/img_050827.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901445/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e11d7c9f-2cb9-5811-8c04-0495183247b8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.172.254/22/goodthingswithbestwayforbetterplacescomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901444/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3868f6ba-1764-5fc7-a902-e73c9fdc2c3d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://pub-45a83f302a1943ed8d62418c2af947ef.r2.dev/rdfg.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","xworm"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901441/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2984e489-6558-5a89-9edd-64d594fb2709","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://pub-a06eb79f0ebe4a6999bcc71a2227d8e3.r2.dev/pin.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","xworm"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901440/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c436066-9847-5470-86a5-3f5a35dd8641","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://185.29.9.101/Standardpakke.toc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://185.29.9.101/Standardpakke.toc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","GuLoader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901433/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4d0b2ce-4ae2-5810-bdfb-cdf3193c3923","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.37.102.150:54475/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.37.102.150:54475/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901430/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59b4a43d-be0f-5c83-a0ea-759e6e6f3f51","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://185.29.9.108/nVgXuGSv49.bin","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://185.29.9.108/nVgXuGSv49.bin']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla","GuLoader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901429/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3671ad8a-8ced-5cc1-b2ed-2eb7a3241374","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://185.29.9.108/HcesVRijHtJscyGevVVH35.bin']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla","GuLoader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901427/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a7072e1-198f-5c73-96d7-b0e620d763d6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://185.29.9.108/Mistakeful.pfb","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://185.29.9.108/Mistakeful.pfb']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla","GuLoader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901428/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8aef48f-16c7-5e52-9acc-405462295b4c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://193.104.58.65/yurumpmonday.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://193.104.58.65/yurumpmonday.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AsyncRAT","rat"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901426/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a677f23e-9eb3-5cc7-8a52-91ff8bf0df9b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.230.25.51:39898/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.230.25.51:39898/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901425/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcac7c28-178f-556f-a753-22f7557c40dd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.230.25.51:39898/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.230.25.51:39898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901424/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2d02c16-a2b5-5fff-ac3e-70e5f555caf8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","js","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901421/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--795a232b-b639-57ad-a1a8-d5b8db9163ea","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/44/ecw/wennedsometingbetterfeaturesfrom.js']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","js","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901422/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ebeeefa8-028d-55ee-a49b-136948ca4e13","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/img/img_220049.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","png-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901418/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--874704b7-b902-5e18-b759-5d7e91619393","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/img/img_185156.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","png-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901419/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5bd58381-f8aa-5a3a-84b2-10602fedc26e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://216.9.224.73/50/img_193544.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","png-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901420/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73e0abe6-5441-58ef-839c-b02e76132ce8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/img/img_005200.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","png-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901416/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--468560ff-e700-5bac-837a-cdcb7d3e140b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/09/xQah941ojbxnpRQKa4zi/image.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","png-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901417/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6cbf0ca-9905-5d7b-ba2d-0979399b3172","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901415/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9e8560d-27ba-529a-a05b-a43e73ef5d73","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://192.255.195.158/img/1.jpg","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://192.255.195.158/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901410/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--470cc023-5d9f-5f73-b2bb-5877035393f2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://216.9.224.73/33/img_190847.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://216.9.224.73/33/img_190847.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901411/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67977f31-c83b-5b08-be26-323827f250fc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.172.216/125/img_000358.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901412/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e96c4387-33b0-56e7-bd18-b743b4ce06b8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.173.9.104/img/2.jpg","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.173.9.104/img/2.jpg']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901413/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e9fc4ad-5774-5e33-b236-e90721827925","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://192.255.195.150/img/1.jpg","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://192.255.195.150/img/1.jpg']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901414/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2ddf44dd-db1e-531a-8118-ac596f0b4fe5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/46/img_210045.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901409/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--524091e9-295d-5723-8868-0b7eb8a4368d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://216.9.224.73/50/img_193544.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://216.9.224.73/50/img_193544.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901396/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e09939fd-6c0d-5151-bb6a-b12081a6bdaf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/img/img_005200.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/img/img_005200.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901393/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a5f09b-f793-58a4-ad67-3ef38b3ed0dd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/img/img_185156.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/img/img_185156.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901394/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--abeeb138-c302-585b-abca-d2d9bc17f18c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://plain-wnam-prod-public.komododecks.com/202608/11/pfsGTK8iJLkOdtyVcP9U/image.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901395/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--916c9fb0-fef8-5932-ae6b-134ea5b11f83","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/img/img_220049.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/img/img_220049.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","jpg-base64-loader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901392/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59ae2f6a-906b-5eb3-9218-e05ee67b8721","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.37.102.150:54475/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.37.102.150:54475/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901391/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b33e8160-8e58-5b6f-83e5-6af744956d3f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901390/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a912e0b-a93b-5b0f-b8d6-05be8f3f74b4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.238.17/23/uks.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901382/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d201e32-103c-55fb-b614-76499b6f425d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.238.16/8/ssn.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901383/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7f0fc3b9-910a-5b2b-8bb4-eea88ef53f0e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.238.16/42/dmw.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901384/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b8f5f5-eaef-519d-8427-defb665e0228","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.238.17/23/uks.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.238.17/23/uks.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901385/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acd40f6b-46f0-5ac3-8024-81603cf6e54c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.238.16/42/dmw.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.238.16/42/dmw.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901386/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc25720b-c5fb-56ce-b1f1-7f444dce154f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.238.16/8/ssn.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.238.16/8/ssn.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901387/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27823d45-53ff-5177-87ac-613aafa3facd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/46/weneedbesththingswithbetterplacecomingforme.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901388/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eaa7bab-0dcc-5422-971d-4c32eab210e5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/223/nicepeopelscarecomngfrobestthingstobebestform.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901389/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27fa3f5a-058f-51b5-a4d0-a03f8d269d82","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901379/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4df592a-3d68-5d9c-a0b6-65c73b59a7ca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://155.103.69.250/245/wemadebestthingsforthebestpeoplescomingfromthelife.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901380/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b97efb24-89f4-557d-881d-ce9a46db05bf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.238.17/23/ecv/sccsq.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901376/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c91375bf-4073-5514-9ad1-c3568caea51e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901377/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5234ebf2-9ccb-57ac-a6e4-81094236032b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/44/goodthingswithbestnationalwithbestfeelings.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901370/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fac41a14-0566-5349-9026-363357a54230","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.238.16/8/ccr/melvetrakingsbestformebestthignscomingfrom.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901371/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e40bef9f-73a3-52d2-b5e7-ebf3a6daa419","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.238.17/23/ecv/sccsq.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.238.17/23/ecv/sccsq.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901366/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8252d5ef-3126-580f-af2c-bd6eea3a61c2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.238.16/42/image_picture_003202490905495093459034.jpg/bestthingswithbestthingswithbetterthings.hta']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901367/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e7b7b72a-7603-5955-a823-2c0f8ac240ee","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://140.237.37.249:40109/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://140.237.37.249:40109/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901363/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--300dabb1-843e-5cce-bdfb-b2ecbaf369f5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://signageinsignia.co.za/kizzy/1.jpg","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://signageinsignia.co.za/kizzy/1.jpg']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901359/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae45da79-f789-52ce-bcc1-47b576d348a6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://sh.classera.com/Naew8m","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sh.classera.com/Naew8m']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","censys","hta","redir-302"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901349/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1953a11-7fb3-545f-92f7-5e73a7911eca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://140.237.37.249:40109/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://140.237.37.249:40109/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901348/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e37f3b31-8432-5b7f-a413-d6da1989542d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://155.103.69.250/46/img_210045.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://155.103.69.250/46/img_210045.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901346/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bae4efc9-f11d-5c3d-acf9-651dc048a3b2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.172.172.216/125/img_000358.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.172.172.216/125/img_000358.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901345/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--03282e40-bf1f-5a7e-adef-84dd85e42c8a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.173.47.72/22/img_172149.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.173.47.72/22/img_172149.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901343/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de08a6df-21aa-5b64-bb66-cce020bcf0fb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://del.sou.pp.ua/install.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://del.sou.pp.ua/install.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","honeypot","shardlure"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901340/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb67e81d-0975-5cca-82d5-cd37319b0904","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://del.sou.pp.ua/install_tm.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://del.sou.pp.ua/install_tm.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","honeypot","shardlure"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901341/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2747bde7-23b1-577d-a00b-d39dbff53c5b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://94.156.166.167:43949/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://94.156.166.167:43949/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901339/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ec473d89-615d-545d-a834-d5a99af6673c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.232.108.113:57428/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.232.108.113:57428/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901337/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f0c3bf-f748-5a65-9914-86c48123007f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://duct-master.com/00/newMSI_PRO.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://duct-master.com/00/newMSI_PRO.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901336/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--febe03e4-844e-5558-b6ab-e778d3cb9ca7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.49.203.6:36171/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.49.203.6:36171/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901329/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8f4c2d4-9014-5d28-bdb6-29aa7b377af8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.192.88.110:35897/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.192.88.110:35897/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901328/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a945de72-d3a5-5eaf-a4a1-544fec1824a4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.224.17.122/pinmsi.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.224.17.122/pinmsi.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","xworm"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901323/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e35e7df9-7f09-5bc9-8d6f-b0887d8b1318","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://64.224.17.122/pin_img.png","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://64.224.17.122/pin_img.png']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","xworm"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901322/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5eb74389-79bc-58b8-9f08-39e6418681c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://195.177.94.22/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","195-177-94-22","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901308/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1394caf9-9ea9-5c69-9b49-f8355e6f1eb8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://195.177.94.22/bin/support.client.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://195.177.94.22/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","195-177-94-22","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901307/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99a3cd84-7006-569c-921a-1e99b3be4d88","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.228:6677/bins/arm5","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.228:6677/bins/arm5']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901306/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d9459e68-0546-5826-8819-e6e977541b09","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/FyTv","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/FyTv']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901301/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8c8ccc7-7545-50a4-a1f6-37dc54763deb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/1sPM","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/1sPM']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901302/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a5af6a27-9d01-5d0c-989d-c786a9d1edb0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/4YN","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/4YN']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901303/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--364408ad-d8f2-5981-a109-41c4766ebcfd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/1Gk","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/1Gk']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901304/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95fa0df0-94eb-5d46-bf8c-69840d66f49a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://129.121.114.124/WzCx","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://129.121.114.124/WzCx']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901305/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--665f4479-67f7-5de1-a631-5a8473b345b3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.49.203.6:36171/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.49.203.6:36171/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901283/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0c644df-3edc-53e8-b51c-0aa1d8cd616c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://195.177.94.84/bin/support.client.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://195.177.94.84/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","195-177-94-84","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901278/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--414d75cb-ba0c-5beb-832b-6b71af26986e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://195.177.94.84/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","195-177-94-84","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901279/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba058a70-3a58-5d6f-86d0-de153d46393d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://195.177.94.197/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","195-177-94-197","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901276/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--22f81db8-1469-52cb-99d3-063a7ad63ca8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://94.154.32.99/bin/support.client.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://94.154.32.99/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","94-154-32-99","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901273/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2fc79c7-f873-5754-a8d0-c377bbbb096e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://94.154.32.99/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","94-154-32-99","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901274/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--615db464-0c19-5af4-8b64-d7149d406e53","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.228:6677/bins/mipsel","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.228:6677/bins/mipsel']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901272/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66953796-0933-5361-ae57-bdfb431d6685","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.228:6677/bins/x32","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.228:6677/bins/x32']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901271/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a116ca4-8f1b-566f-b4d4-45d5c4540791","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://209.141.44.218/ohshit.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://209.141.44.218/ohshit.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","209-141-44-218","mirai","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901269/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41f0d6ac-520d-5d25-b63d-239fa5861462","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://209.141.44.218/hiddenbin/boatnet.arm6","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arm6']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","209-141-44-218","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901270/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--558d2d7e-8574-5948-b1b2-2c662c2c3b50","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://209.141.44.218/hiddenbin/boatnet.arc","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://209.141.44.218/hiddenbin/boatnet.arc']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","209-141-44-218","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901268/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b4587e0e-f3e4-5c42-8326-90c57b54d006","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.228:6677/bins/x86","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.228:6677/bins/x86']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901267/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--810ef14f-83bf-573c-ad4b-d62cfc65cda1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.228:6677/bins/mips","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.228:6677/bins/mips']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901265/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e2e1f46-c898-55fe-b24e-853bb06f398f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.228:6677/Exodus.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.228:6677/Exodus.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901266/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6253e2af-328b-5105-b290-b4208c017e4c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.129.131.159:42876/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.129.131.159:42876/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901259/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a69ee98c-ff65-5254-9258-11a08e59ad6f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.5.173.164:46012/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.5.173.164:46012/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901257/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a76446b9-4584-59cb-a65b-20087a570b07","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://140.237.36.213:34302/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://140.237.36.213:34302/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901254/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72f3f3f5-93c5-5fcd-af6b-178933399cfe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://110.36.86.83:33716/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://110.36.86.83:33716/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901253/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81483539-44a3-5726-9a21-f071c91302e6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.52.217.13:59440/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.52.217.13:59440/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901249/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d20da5af-62cc-5614-94ab-8e580e6a428b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.223.124:58798/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.223.124:58798/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901248/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aec269b1-9209-5b6a-b3b0-b5a3bbf6425f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.232.108.113:57428/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.232.108.113:57428/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901247/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--613861a9-1a6b-55fc-b376-57ed764e5f23","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.230.37.213:45304/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.230.37.213:45304/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901246/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d920d363-89fe-533a-b97c-680a2f1278f8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.52.217.13:59440/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.52.217.13:59440/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901244/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0bbbf77d-9d5d-5a10-88da-9c7f129f6305","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_57593b4d53209e53.cmd']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","54e64e","dropped-by-amadey"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901241/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d304a0c-2fd9-51ad-830d-c56e2f35ce4e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.223.124:58798/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.223.124:58798/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901240/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fc60910-70a5-56c6-9018-73ce3e3ed9cf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://121.234.156.10:48875/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://121.234.156.10:48875/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901238/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--881ea514-d6d6-580b-bbaf-50f801033cfe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://71.207.128.92:54954/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://71.207.128.92:54954/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901236/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e43154d3-41b3-580d-9743-d9a32da2601c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://211.158.166.117:51581/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://211.158.166.117:51581/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901235/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--26facd60-6807-564e-9823-c6992c22788c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://78.25.149.153:39654/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://78.25.149.153:39654/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901234/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9b156df-ed2a-5b09-82bf-76bf5e41eb1e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.21:51285/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.21:51285/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901232/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8abc076-ef34-57fc-94aa-7e1ecbbf7e6d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.147.159.41:36190/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.147.159.41:36190/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901231/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3af3c8d3-74d0-504e-97b0-1f4c83223c19","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.180.15.83:57232/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.180.15.83:57232/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901230/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a2fd7ed-9a2b-5f98-bff1-504c28a83c6f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.21:51285/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.21:51285/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901227/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7d7af1e-14d5-5cdb-a2ec-47e9432370ca","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.172.13.19:60669/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.172.13.19:60669/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901226/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77cb7fc5-4fdb-5dad-8c4c-51ea134f968c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://124.92.80.153:35984/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://124.92.80.153:35984/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901223/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--050c7165-61ed-53e9-96f2-24e9c79b6c34","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.43.60:47091/bin.sh","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.43.60:47091/bin.sh']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901222/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--966266aa-eb2b-5b5d-bc22-1dafab0f8338","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.173.101.27:46920/i","description":"Aggregated from open source feeds. Score 78/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.173.101.27:46920/i']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":78,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901221/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5fcaeda4-5bd9-5f9a-8c20-0d358e7846ed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.198.138.178:59015/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.198.138.178:59015/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901217/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d196b83-bf46-5e2d-a045-c73d54ec3a91","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://95.155.151.113/d/mini.x86_64","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://95.155.151.113/d/mini.x86_64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai","opendir","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901210/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a701714a-9a05-5f15-ac33-18fff488a82f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://95.155.151.113/d/mini.mpsl","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://95.155.151.113/d/mini.mpsl']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mips","mirai","opendir"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901211/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--11d739cb-6548-5310-aff2-883866abd742","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.53.51.109:44329/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.53.51.109:44329/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901212/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47de49dd-81cd-5f6f-b5af-5bfa5007925a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://95.155.151.113/d/mini.mips","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://95.155.151.113/d/mini.mips']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mips","mirai","opendir"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901213/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43e6f981-3fda-5b33-a77c-9327b483c34e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://95.155.151.113/d/mini.arm64","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://95.155.151.113/d/mini.arm64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","arm","elf","mirai","opendir"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901214/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24e00e9f-6801-5133-9aa5-b3504126d23e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://95.155.151.113/d/mini.x86","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://95.155.151.113/d/mini.x86']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","elf","mirai","opendir","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901215/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2f2a1b3-ef75-5386-b5d8-45c60a0e358b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://95.155.151.113/d/mini.arm7","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://95.155.151.113/d/mini.arm7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","arm","elf","mirai","opendir"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901216/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c42cb02a-a9d0-5625-aa36-282177b905e9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.235.94.77:54061/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.235.94.77:54061/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901208/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c58046-c0ae-5b71-9fbe-3b0c0016034a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.235.94.77:54061/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.235.94.77:54061/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901209/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--56f06658-b2c5-57be-ae7e-691701ee867d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.198.138.178:59015/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.198.138.178:59015/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901206/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a74c21df-f08b-5d33-b845-4269246fd394","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.8.90.13:33466/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.8.90.13:33466/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901205/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00b157cf-099f-5e14-9318-e3a40158eb45","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.127.103.153:37513/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.127.103.153:37513/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901203/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c591ea8-0aea-55b0-a9ca-9a1aaf1ddb0a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.58.177.86:33235/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.58.177.86:33235/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901202/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12aa6fdd-bf22-5890-89cf-da4c72bdf76a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.198.193.62:36489/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.198.193.62:36489/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","arm","elf","mirai","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901201/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7316f9cc-2064-5d5b-971e-0979de50c0a0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.198.193.62:36489/Mozi.a","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.a']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","arm","elf","mirai","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901198/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c8d8a7a-7ab7-5630-a71e-c7f37dcaf54d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.198.193.62:36489/Mozi.m","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.198.193.62:36489/Mozi.m']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","arm","elf","mirai","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901200/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a372f351-c10e-539c-b5a6-11e4d1bd00a3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.205.10.123:45052/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.205.10.123:45052/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901196/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7478960c-2221-5386-a617-42a2241c80a8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://39.77.117.255:35209/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://39.77.117.255:35209/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901194/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15cdbe64-c270-5056-a0db-8442df7bf4f7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://60.18.11.118:36365/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://60.18.11.118:36365/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901193/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6434e17-4dfe-5e22-b739-46cfc3955960","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.205.10.123:45052/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.205.10.123:45052/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901192/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--81142e9f-29ec-581d-b984-ecb9aa14e7bc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://124.235.239.199:45573/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://124.235.239.199:45573/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901190/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08ae8673-0fb3-5020-a1c3-e2619935a4f0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://39.77.117.255:35209/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://39.77.117.255:35209/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901188/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f85126d4-aded-543f-b2de-8013f4a57875","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.235.174.78:56482/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.235.174.78:56482/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901186/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93c680f1-48b2-5801-a651-b832755225dd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.55.57.227:57005/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.55.57.227:57005/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901185/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7253897-e991-5c8b-a4e3-06903a4245ed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.48.28.98:35726/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.48.28.98:35726/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901184/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--721cc790-59db-583f-9370-f3891d92dfab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.234.166.234:40751/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.234.166.234:40751/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901182/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9195100-26fa-54c5-8546-fc100768ded2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://60.18.11.118:36365/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://60.18.11.118:36365/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901181/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2248d2ad-6767-5e0b-9822-220d3180335b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.116.20.47:46175/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.116.20.47:46175/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901180/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ab51de1-6fc6-5148-af1d-efe9ce920d7c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.116.20.47:46175/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.116.20.47:46175/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901179/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f815be9-9e11-5d6a-bb74-91f2bab52279","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://183.153.126.58:36155/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://183.153.126.58:36155/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901178/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99ac17c1-71dc-56f1-8291-59e0e317e5fe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.58.177.86:33235/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.58.177.86:33235/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901177/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1f05be64-871a-59d4-b8eb-e57ffd92d429","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.247.84.112:59435/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.247.84.112:59435/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901176/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d52d397f-f652-56c1-a16c-cb2d620a6d82","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_3481d91a938ab342.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","c2-monitor-auto","dropped-by-amadey"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901175/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a90e4f85-b7af-5285-a33d-e8f6e3649d1e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.63.51.94:48009/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.63.51.94:48009/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901127/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--373e215b-dc06-5b87-88b1-53028e64f1f4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.61.41.247:51273/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.61.41.247:51273/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901123/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd112836-af24-5bd0-b549-27bf1bdbdd83","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://78.25.149.153:39654/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://78.25.149.153:39654/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901122/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c75eb4a6-5ae6-527c-8cdb-e3fb787300d3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.61.41.247:51273/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.61.41.247:51273/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901121/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18be5c84-ef10-5ea4-b179-4be656724615","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.248.106.46:52448/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.248.106.46:52448/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901118/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1e5b243-40f8-5bcc-969c-cc863bd77f1c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.ppc","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.ppc']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901111/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--83bd1315-bac6-52e0-b152-c6f4104d38b2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.aarch64","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.aarch64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901112/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0e2199f-9646-5685-ad2a-c63654afd4e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.sh4","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.sh4']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901096/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--edf38bd5-7935-5d79-a8e4-c75795f5ca78","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.mips","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.mips']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901097/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4e677fe-6592-5e9b-8260-a08b98e34b22","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.arm7","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.arm7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901098/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9658757f-ea4d-5b59-a887-3089ca9eb195","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.i686","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.i686']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901099/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a109261d-d303-576d-980d-33f4f95dd369","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.x86_64","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.x86_64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901100/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8da77ac9-73df-5375-aa77-7b37368b3214","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://176.65.139.232/bot.arm","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://176.65.139.232/bot.arm']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","176-65-139-232","elf","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901066/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70e3516e-2359-5aea-a210-23ef94fbb220","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.109.219.147:35136/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.109.219.147:35136/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901065/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3677c05f-6907-5727-8be3-a4b07e04096c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://112.247.84.112:59435/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://112.247.84.112:59435/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901053/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a0bf53f-7f49-5f4e-ab28-30f2f2fc3fae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.50.98.44:53110/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.50.98.44:53110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901033/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8fea91d1-2145-5e24-8233-1339b2c18e1d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.113.203.98:49336/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.113.203.98:49336/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901032/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80664c9e-345e-51e9-9cb0-11c772d6cf82","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.239.96.147:46916/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.239.96.147:46916/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901030/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d174c3cd-66cd-53ed-92da-37a548351627","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.15.192.179:36837/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.15.192.179:36837/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901029/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c2574e8-4426-5237-b941-9ff10f71d222","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.49.64.77:52921/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.49.64.77:52921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901026/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a322325-0af5-5e65-a86f-c0a3f1e607ce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.167.183.194:52110/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.167.183.194:52110/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901021/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5a9feb8a-be59-5ac1-90f6-429241686697","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.5.94.63:4370/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.5.94.63:4370/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901006/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f860409-09ba-5d77-ab39-43d52df992bf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://130.12.182.77/blink.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://130.12.182.77/blink.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","opendir","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901005/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf247468-3bee-5114-ae6f-2f897358b5a9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.167.183.194:52110/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.167.183.194:52110/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901004/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de106bbc-a431-55ed-aac2-0069dd4b6102","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.113.37.79:56846/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.113.37.79:56846/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901002/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d2cedc3-8304-5972-b62a-79dbd831780a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.113.203.98:49336/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.113.203.98:49336/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3901001/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--030286f5-b52c-5b4c-9861-da72f32ee6bd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.219.74.117:52755/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.219.74.117:52755/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900999/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--70ff7ca1-15ec-5343-a459-e93c8210a767","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.113.37.79:56846/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.113.37.79:56846/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900998/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cda0b6d-e276-5208-a7fb-55a35cdbef8e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://107.175.88.87/23/img_185335.png","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://107.175.88.87/23/img_185335.png']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900997/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--697b670a-e12c-5ae7-ade5-8503880af3aa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://172.245.195.245/35/img_190431.png","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://172.245.195.245/35/img_190431.png']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","rat","RemcosRAT"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900995/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a5943b9-0c9e-5561-9bf9-9a710269c7c5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://rcf.co.mz/Godabeg1.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rcf.co.mz/Godabeg1.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","exe","PureLogsStealer"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900992/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4f9dc277-c904-5b29-a13b-93bfb292ca76","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://121.234.156.10:48875/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://121.234.156.10:48875/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900990/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--720ea355-86e2-5d3a-a274-f9f1162ade82","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://130.12.182.77/tvt.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://130.12.182.77/tvt.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","opendir","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900989/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a4c56c7-b68f-5d81-8836-918ea4a4ae43","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://130.12.182.77/dvr.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://130.12.182.77/dvr.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","opendir","sh","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900988/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eebf844a-7f58-54d3-9e3b-3837dbf7b8aa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.121.143.204:58754/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.121.143.204:58754/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900986/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--86f0c2d4-74ab-5e29-a9e6-b463e856ba7c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.231.88.100:39090/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.231.88.100:39090/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900975/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65c2265c-cea1-55be-b76c-73ef019cb1ed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.37.100.78:38525/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.37.100.78:38525/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900964/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e5977e20-c631-52a0-9adb-f3e1ac2e0309","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://chrome-windows.ru/ChromeSetupWindows.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://chrome-windows.ru/ChromeSetupWindows.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","exe"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900955/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ad7757f-45fe-5059-ac4d-3604c4a73433","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://37.78.176.5:45921/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://37.78.176.5:45921/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900953/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1093118b-a4c9-5f7f-a00b-9930923508c1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_e8219df7a9a21088.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","54e64e","dropped-by-amadey","LummaStealer"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900952/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f20d7051-5d91-537a-aaed-88bd9eb7536b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://109.236.46.199:42682/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://109.236.46.199:42682/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900951/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a6672408-0620-5f37-9563-f4f1b3ff84c0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://121.231.139.26:36392/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://121.231.139.26:36392/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900950/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3114781c-7ca9-57ca-a372-37b1b5edbdb9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://58.22.18.152:33899/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://58.22.18.152:33899/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900949/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a418f5c-1e97-58a9-8982-96c27a685271","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://109.236.46.199:42682/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://109.236.46.199:42682/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900947/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a10cd56-0f9d-55b0-9d31-3e3fd1369f3e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://58.22.18.152:33899/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://58.22.18.152:33899/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900945/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18eff422-dcd8-5fe6-9f97-776711d09c65","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.134.41.212:48460/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.134.41.212:48460/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900943/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8727da78-9f44-5a09-adb1-b13fde18aa8e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://91.92.243.232/Bin/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","91-92-243-232","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900939/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--79534bc4-a043-5425-b45f-2c269c4fbb63","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://91.92.243.232/bin/support.client.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://91.92.243.232/bin/support.client.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","91-92-243-232","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900938/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--66f59001-a1d7-591c-9ee5-12d1d3acfa7c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.134.41.212:48460/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.134.41.212:48460/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900908/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53e475d9-80c8-5ea9-ac6f-b9f1f17b4569","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://130.12.209.147:55609/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://130.12.209.147:55609/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900907/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2273825-cd63-5f23-a5f4-a5d345e8ed10","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.137.204.59:51581/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.137.204.59:51581/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900906/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ae1a1f7-0408-5bd3-99e2-756e7d51b5a2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.137.204.59:51581/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.137.204.59:51581/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900903/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9925fb1-4876-53df-8e66-ea38d0b1ae33","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://47.84.190.146:9593/linux","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://47.84.190.146:9593/linux']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900898/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6cb1ee1-873c-5f61-8fc9-836c1f187dc4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.23.55.232:7702/linux","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.23.55.232:7702/linux']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900899/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dcf3c944-e80a-555d-b8ab-7b47dac9eccb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://96.245.232.132:44492/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://96.245.232.132:44492/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900900/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--424243d2-1bf7-5b09-bd78-d18e44805a3b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://120.84.213.21:46712/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://120.84.213.21:46712/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900902/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1a27181e-f414-5bcd-868d-c1b91f37ebcc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://103.80.57.126:54698/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://103.80.57.126:54698/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900877/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b425dd43-f421-5f00-8ead-9d192bec9f8b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.180.11.230:34276/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.180.11.230:34276/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900878/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--439f9a53-8730-5456-833c-13ca8b2572c0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.146.211.156:47338/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.146.211.156:47338/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900880/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--636c4b5a-5a52-5121-8ba7-be2c5510d7ce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.148.29.181:47643/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.148.29.181:47643/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900882/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8e027ffa-5e6e-598e-93ac-11a90014b40a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.234.185.8:38535/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.234.185.8:38535/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900883/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e2210e06-a35c-56c5-acd4-85637b53a40a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.228.149.193:49576/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.228.149.193:49576/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900887/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a320d36-67a4-5651-994c-fe00282e0b21","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.116.107:43623/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.116.107:43623/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900888/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5910a980-28f5-599e-8032-b737922308b5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.58.131.62:38469/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.58.131.62:38469/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900889/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89994482-2d5c-5d16-b843-5a8cdcde50fa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.104.156:32771/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.104.156:32771/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900892/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8aed3fb3-5a9f-5c6e-bb53-95a0cae6628e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.51:46526/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.51:46526/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900894/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fdea139-ce85-5cbe-91d1-77b78ed3ab01","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://105.186.64.242:41071/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://105.186.64.242:41071/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900897/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f3ed799-69e2-58e0-9ae0-5395dcebc4b0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://120.28.135.245:34017/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://120.28.135.245:34017/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900872/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e910c5e5-b49d-5b46-9732-6c4a0eb52f77","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://45.170.224.217:57287/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://45.170.224.217:57287/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900874/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21468cc7-2996-5e6a-8a0e-563053edd28e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.86.136.138:39726/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.86.136.138:39726/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900875/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f5183fe9-b63b-543f-b033-af98cf8a994c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.115.68.225:51187/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.115.68.225:51187/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900876/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--de490edc-bb51-579e-89dc-0c2f79ac607d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.180.15.83:57232/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.180.15.83:57232/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900870/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e98161e6-286b-5074-a0b3-9515d4c582fb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.196.6:60240/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.196.6:60240/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900865/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c49925c9-1626-5c93-a307-a2a0a411908f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.196.6:60240/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.196.6:60240/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900867/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e57f39-9dd9-5891-9dde-867e2a40f444","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.55.212.26:51890/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.55.212.26:51890/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900861/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93e937a9-19e1-5c58-992e-dd1795e31ae7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://122.139.13.204:51081/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://122.139.13.204:51081/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900862/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fde47ae0-7164-5de8-beba-15553ad454ba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://122.139.13.204:51081/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://122.139.13.204:51081/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900864/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2a0cc18-c576-54e1-8f16-20af19acc128","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://45.170.224.217:57287/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://45.170.224.217:57287/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900845/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--89685833-5661-5e06-898b-3b867b83bdf3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.52.156.140:46601/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.52.156.140:46601/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900846/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47259545-f213-5bce-bb3d-cf798361bcbe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.52.33.100:54465/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.52.33.100:54465/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900847/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8803f656-5f63-5a2f-9a4a-069f1cc3a0fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://115.62.148.107:57509/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://115.62.148.107:57509/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900851/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1670ac26-5b01-5cce-9113-9e8128d97b5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.74:36898/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.74:36898/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900852/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--649fef0a-c17b-5dbf-8d9e-68b46b29b21d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.52.204.44:32770/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.52.204.44:32770/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900855/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d4ee337-8a7b-5223-9994-1c93c47034ed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.200.107.56:39903/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.200.107.56:39903/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900856/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b477ce6-6080-571c-8b2f-a5315013bc04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.110.42:48403/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.110.42:48403/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900857/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91e4c2d6-c25f-5a65-945c-da46017b77c0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.15.192.179:36837/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.15.192.179:36837/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900859/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--beefefc1-d9c2-5d46-9ba6-72e16ade939e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.137.177.124:50033/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.137.177.124:50033/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900840/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bac3a5c9-875c-5d7f-96a9-307b07ba368e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://103.80.57.126:54698/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://103.80.57.126:54698/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900843/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8150fbb6-5bbe-59c3-97d0-ce364319dc10","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.146.211.156:47338/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.146.211.156:47338/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900837/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50ab3467-4aa3-56f8-8046-8769bfb0aadf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.190.20.88:42140/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.190.20.88:42140/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900836/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--470b7155-4e40-5180-b9e2-8739dd9c7cec","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.147.159.41:36190/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.147.159.41:36190/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900829/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2bc2d7e7-610b-5ff9-81cc-ca48b54ac84b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.115.68.225:51187/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.115.68.225:51187/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900831/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb9efc2e-fb54-5cbe-86f9-255fd4b34d45","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.74:36898/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.74:36898/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900807/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e62c4621-49a6-536d-aef7-5be7d25220fd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.182.123.61:50511/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.182.123.61:50511/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900808/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0635020a-a2f4-5842-aa11-7fcc9b2d80b8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.86.136.138:39726/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.86.136.138:39726/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900811/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb867dc2-3744-5069-b383-23ae52d273f6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://61.52.33.100:54465/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://61.52.33.100:54465/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900813/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf21d9c6-6fbd-50fe-b408-9fa4107b1695","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://37.78.176.5:45921/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://37.78.176.5:45921/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900815/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a100b786-8616-547a-870c-6fb4611e56d9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://59.58.42.82:51830/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://59.58.42.82:51830/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900820/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a67d99b-a4b9-5a37-89cf-d5eb4333056e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.116.107:43623/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.116.107:43623/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900822/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0310182d-b49c-5452-9184-3943ef121ea1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.58.131.62:38469/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.58.131.62:38469/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900823/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0787cf-ce43-5d9c-8895-ba95fe2e666d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.147.220.91:36766/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.147.220.91:36766/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900825/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac791be2-a82c-5253-88a2-1c8efc6fe068","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.190.20.88:42140/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.190.20.88:42140/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900826/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--deaab8c3-09b9-5924-bebb-4f2abcda7fd5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://1.20.91.236:53593/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://1.20.91.236:53593/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900827/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--154b22e4-2289-5769-9d56-434654e7cd49","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.147.220.91:36766/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.147.220.91:36766/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900828/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae432eaa-e7f3-572b-99ce-6a9b986645f6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.157.253.209:37860/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.157.253.209:37860/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900795/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b12b09-55a5-5e3d-96c0-5e2debe29db0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://113.231.229.97:60941/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://113.231.229.97:60941/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900796/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8854385-71a6-5d4f-8694-efa052f59926","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://93.157.253.209:37860/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://93.157.253.209:37860/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900797/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14e483c2-b7a0-53db-b149-c2783ce26451","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://83.68.249.16:45432/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://83.68.249.16:45432/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900798/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa22e07e-eb67-50ba-bf28-8542dce228cf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.104.156:32771/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.104.156:32771/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900805/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ac0d859-1cb2-5400-a25d-6043ca86977b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.46.213.70:47197/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.46.213.70:47197/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900791/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d8485a0-23b1-56f1-b927-37acf3b567cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.228.39.67:45035/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.228.39.67:45035/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900787/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aefb6cc-d389-5b8d-b0d9-51a5648349e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://221.15.218.63:33777/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://221.15.218.63:33777/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900773/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27782104-1fb3-5f64-921a-3d2dc6b06cf0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.228.39.67:45035/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.228.39.67:45035/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900772/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71c6ecd9-28c7-5dbb-b507-32c83436cc3a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://185.29.9.108/Virginalling.asi","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://185.29.9.108/Virginalling.asi']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla","ascii","Encoded","GuLoader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900771/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8246725-685a-5ecf-a70b-25e348b74811","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://185.29.9.108/gchLdNMan179.bin","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://185.29.9.108/gchLdNMan179.bin']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","AgentTesla","encryptred","GuLoader"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900770/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7de69f0f-a264-509e-9789-ef59e929c9d8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.24.12.180:50663/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.24.12.180:50663/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900756/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2352b33-4cfc-585d-99b7-440ad22dec59","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.127.103.153:37513/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.127.103.153:37513/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900755/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8539947a-1cd6-5584-b809-e4bf06ac64a5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.12.234.37:36560/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.12.234.37:36560/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900754/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0a7d0b-a232-53eb-bacf-14a348cfd810","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.100:38107/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.100:38107/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900752/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d69424db-d27d-5bab-bc5e-27874444d0fb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://27.24.12.180:50663/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://27.24.12.180:50663/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900751/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdd7975e-88d9-5153-922a-a22791651c0c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://210.208.111.220:36372/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://210.208.111.220:36372/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900749/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9da943ac-b9b6-56b5-9a75-e8100ba0d68a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.224.67.199:54598/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.224.67.199:54598/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900745/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--629b321c-1da3-5e65-b559-4cdaee448ecd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.224.67.199:54598/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.224.67.199:54598/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","None"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900741/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62fcfb32-865f-5990-8278-23bb63c0dc56","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.111.210.192:51471/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.111.210.192:51471/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900689/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa8d6eb7-d7ae-598c-a65d-ff750db243be","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://217.60.195.143/bot","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://217.60.195.143/bot']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900686/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b896944-5e66-5081-a527-2ba304a0adb5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/x86","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/x86']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900637/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8596daa8-0a69-5acc-9ce6-73b5357629dd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/arm","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/arm']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900638/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eda5fae7-0185-5e47-9323-4ea7419de544","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/mpsl","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/mpsl']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900639/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15f92191-033e-57d6-8d10-07768d621f5f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/arm7","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/arm7']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900640/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a10a2c7-ee87-572f-a50c-3b3ceb525086","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/mips","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/mips']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900641/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d33681d0-49d9-5f45-aaea-d20153995549","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/arm5","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/arm5']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900642/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2e9ba3a3-d452-54cb-a327-f6cc5a5c0605","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/x86_64","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/x86_64']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900643/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82662dde-3621-5af0-b995-e39eab52168d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/ppc","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/ppc']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900644/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d181bde-e640-56b4-b930-d517973269bb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/m68k","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/m68k']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900633/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85e020b9-69a1-5e00-b81b-fbd71c83a8e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://43.98.174.233/release/arm6","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://43.98.174.233/release/arm6']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900636/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c587e46d-7ba3-5f79-b10d-9ef0392b85ff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.43.60:47091/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.43.60:47091/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900575/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49b065cf-e47d-5490-8f8d-c54641d21158","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://105.186.82.28:41113/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://105.186.82.28:41113/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900569/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--996b94f6-1ba2-50c3-beee-77723073acaf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.45.148.93:57695/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.45.148.93:57695/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900568/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4083a5e-2587-5e37-952a-457ecd1817b3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://xunyyymdfv.oss-cn-hongkong.aliyuncs.com/uuyc.4.1.0.zip']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","backdoor","Dapato","rat","SilverFox"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900565/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62404ccd-3e00-5399-baf7-ee113b9a078b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://130.12.180.141/ScreenConnect.ClientSetup.exe","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://130.12.180.141/ScreenConnect.ClientSetup.exe']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","130-12-180-141","connectwise","exe","ua-wget"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900550/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f38d88d4-533f-5547-b2dd-6b8fec87e5d7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://105.186.82.28:41113/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://105.186.82.28:41113/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900551/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42f0373e-ceec-5e27-b863-ae21df2529a5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://117.26.226.42:41542/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://117.26.226.42:41542/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900549/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b92df2e8-f292-5bc4-b46e-f0d9b0955858","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.153.92.244:48563/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.153.92.244:48563/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900404/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d24d35e-6346-5e16-b8a0-c61d08a04f4c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.117.165.9:33305/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.117.165.9:33305/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900400/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff67fe71-3f15-5997-9eb9-e72d3d062c75","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.44.47.23:54371/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.44.47.23:54371/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900401/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2c35045-6caa-541b-98ea-154bf3f4921e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.153.92.244:48563/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.153.92.244:48563/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900399/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a846e7d0-28bc-51c2-873b-8c21de4e22a8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.140.161.119:54327/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.140.161.119:54327/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900398/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2340993b-f5a1-5b68-bd15-cf542921b876","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.235.75.164:57996/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.235.75.164:57996/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900397/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8876c284-a5b3-5d20-bdc8-d31e286c40f1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.71.24.56:48673/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.71.24.56:48673/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900386/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--acdedd4a-7912-5f65-ae48-b4ebdc4d4a70","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://36.71.24.56:48673/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://36.71.24.56:48673/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","arm","elf","mirai"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900383/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ac03075-84dc-5146-b346-fc4cfc2bf2b7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://91.92.242.236/files-129312398/files/file_457316565c5d19a2.cmd']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","54e64e","dropped-by-amadey","PureLogsStealer"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900382/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f1c92caa-ddf6-5db3-992f-073df7556e82","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.179.237.64:40459/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.179.237.64:40459/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900379/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa624c2-bdc2-56f3-8a1d-c53ebe869966","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://42.234.166.234:40751/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://42.234.166.234:40751/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900378/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33c3dbaf-cf3c-54fd-9d1f-f45bc48b175c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.13.106.196:55036/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.13.106.196:55036/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900375/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef0c32eb-ba61-5f80-8280-6cbd6a0369e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.14.193.241:34414/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.14.193.241:34414/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900374/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87335f5-dfe1-5250-a61a-ac1a8745881e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://222.140.161.119:54327/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://222.140.161.119:54327/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900373/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aca89841-cec7-54da-997b-ece9b2004673","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://119.179.237.64:40459/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://119.179.237.64:40459/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900371/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a4dd3ab-7103-5836-8027-cb1a2c522316","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://182.123.40.234:41791/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://182.123.40.234:41791/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900370/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c3783342-6bd5-58d0-a446-b7d91c4e14ca","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.10.145.33:33546/bin.sh","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.10.145.33:33546/bin.sh']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900368/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--15e6902c-7b63-5d44-bb38-f1795fe14df3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://125.43.107.232:46123/i","description":"Aggregated from open source feeds. Score 68/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://125.43.107.232:46123/i']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":68,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900364/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2d9ccc6-2077-5880-b704-5298e1b06a87","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://123.12.234.37:36560/i","description":"Aggregated from open source feeds. Score 59/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://123.12.234.37:36560/i']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":59,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900355/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e80107ef-c6c4-5c7e-bf98-f1093f469b75","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://178.16.54.109/bolodo","description":"Aggregated from open source feeds. Score 59/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://178.16.54.109/bolodo']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":59,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","dropped-by-Phorpiex"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900350/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f428e059-8dad-5f52-b791-9313b93cc29a","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"malware-distribution: http://175.175.26.181:34146/bin.sh","description":"Aggregated from open source feeds. Score 59/100, 1 sighting(s), confidence decays with half-life 5d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://175.175.26.181:34146/bin.sh']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":59,"labels":["darkwick:provenance=feed","darkwick:category=malware-distribution","darkwick:family=malware_download","32-bit","elf","mips","Mozi"],"external_references":[{"source_name":"URLhaus","url":"https://urlhaus.abuse.ch/url/3900327/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a60e3d17-d23e-53e2-9449-e717d3d24e83","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.robiox.com.ps/users/8151803013/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.robiox.com.ps/users/8151803013/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f983d93-2266-57e4-9301-571c618d278b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bd3685.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bd3685.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f74619a-2637-50f4-8a7e-fc011c70f516","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://0ee24f.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://0ee24f.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ead529e4-39ad-50c5-a0b5-5c2400e7db2b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://81cc79.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://81cc79.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d8fc4368-991b-59b5-acf2-84f7758b0504","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://d51b01.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://d51b01.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a627e430-e27e-525f-9770-cc89800438d4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://33dbae.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://33dbae.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c50eecb-9aeb-5abd-b457-f2d80d055fe7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://53cfaf.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://53cfaf.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67aad046-e162-5e5f-9d52-f6f105b5573c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://guide-library-30bd.siti111856.workers.dev/privacy-information-center/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://guide-library-30bd.siti111856.workers.dev/privacy-information-center/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--505ba78d-910b-5bfa-981a-5bf30c60ecc7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.rebrand.ly/548abc/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.rebrand.ly/548abc/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--949ae303-c314-5b55-8b9f-99e1364d2e9f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://imhrithik.github.io/Sound-Vibe/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://imhrithik.github.io/Sound-Vibe/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e7f5b5c-7e88-5522-9904-6d819320cf12","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://forthit.top/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://forthit.top/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b044e51f-2329-5f4c-876e-883beec34fbb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.refund-paylater.online/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.refund-paylater.online/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d523ed7e-c4ce-57c6-820f-a3aae39e3b21","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.logid359-hlga.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.logid359-hlga.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e00e232-ff01-544e-92bb-0fe42a2bde5b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.shopeeid547.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.shopeeid547.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ac054c7-3151-5bdd-b41f-9630fdac0570","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.walletcoinbase-zeta.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.walletcoinbase-zeta.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a10ca5c4-0020-5444-ac73-a18b8a03bc78","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.frontend-eight-gamma-89.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.frontend-eight-gamma-89.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6543e3a2-86a2-5572-b4c8-b6207670e21d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.claimed-gifts.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.claimed-gifts.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--efd1d503-e298-5af8-9e9f-e75aff3dcfe0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://assets-ledgrolive-learn.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://assets-ledgrolive-learn.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ced57c5f-62aa-50e6-86be-f7ee614af104","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://began-ledger-live-desktop-eng-us.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://began-ledger-live-desktop-eng-us.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdf53dc-54ce-51af-aa31-b42211c6341b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://app---ledger-live.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://app---ledger-live.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f05e66f-e50a-5bd9-a7d4-89abef067199","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://alon-live-ledgr.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://alon-live-ledgr.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2f47e6c5-3dfc-5367-b12d-7ff2afea0102","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://binance-trading-bot-36q.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://binance-trading-bot-36q.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4719f5ac-0144-5186-a08e-42177b8cd7d9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://advance-li-ledgrr.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://advance-li-ledgrr.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a102c902-ed97-5567-9b81-4adc45ca503b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://cloud-desktop-en-ledgr.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://cloud-desktop-en-ledgr.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95f88b7d-dea8-5907-b821-408316b666f1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://app-ledgr-downlod.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://app-ledgr-downlod.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbd6724d-8349-5da7-bfa9-bd7035388d95","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://base-ledger-app.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://base-ledger-app.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93302763-3219-56c4-83c7-7d33263106e2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://advance-ledgr-live.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://advance-ledgr-live.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b0236fd-17da-504f-b964-b986a5d32566","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://apps-ledgre-live.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://apps-ledgre-live.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e584e8c-f2d1-5ff1-9ed4-5ace8c998fa3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://app-ledgr-livedoc.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://app-ledgr-livedoc.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2cb0a17-5b7b-54df-b904-106e77ae221e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://accss-metamsk-lgn.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://accss-metamsk-lgn.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa6484a-0740-5afb-8913-a31f97a1883d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://ask-ledgr-live.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://ask-ledgr-live.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2abd205-3005-53e8-94da-2ab3fba75a9d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://app-ledgrslive-en-us.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://app-ledgrslive-en-us.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45a3eed8-124d-5176-a30a-5db25d3a8592","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://access-ledgr-dextop-en.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://access-ledgr-dextop-en.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0b9484a-8afe-59dc-b8e3-e01eb93591e3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://access-ledgr-desktop.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://access-ledgr-desktop.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46ed9384-0cff-5dcc-82a6-e187c33acf28","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bing-ledgrhardwear.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bing-ledgrhardwear.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ee2f9592-6cba-5083-aef7-2aaebb64e3ab","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://app-x-desktop-ledgre.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://app-x-desktop-ledgre.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8f7427ce-ee01-57f2-a57f-edb53d3e2850","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://access-ledger-live-desktop.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://access-ledger-live-desktop.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--691b61af-c187-5584-868c-3b2af6447b19","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://assets-ledgrlive-eng.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://assets-ledgrlive-eng.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8205c3ed-5b3b-5df0-a691-0f70c693fb13","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ask-ledgrwalet-liv.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ask-ledgrwalet-liv.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc006c8c-4e28-5280-b8c6-711e60b081b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://access-ledgrlive-io.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://access-ledgrlive-io.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad020718-3cbd-5947-b948-27aa50b2a990","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://access-en-ledger-live-download.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://access-en-ledger-live-download.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--836dd24c-8df5-5e66-9cf2-750fad8a02e1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://app-ledgrs-live.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://app-ledgrs-live.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6669fb6f-c832-564b-a2e0-06724b10d35d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://apps-ledgger-li.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://apps-ledgger-li.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--730893eb-85e9-5827-b1c8-dcf40a193f97","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a-desktop-live-ledgr.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a-desktop-live-ledgr.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4802f949-c6fc-533e-b681-1f8b17f78382","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rbcode.net/v/d892a96d2f3b76c82c157b1b2433d712","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rbcode.net/v/d892a96d2f3b76c82c157b1b2433d712']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fef0d8e-c454-501b-8f0c-f366e34f0387","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://1fba23.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://1fba23.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c76979e-14f2-5525-a88d-c6e85d68e100","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://netflix-clone-steel-three-83.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://netflix-clone-steel-three-83.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9c0841fd-19b7-5435-b3ce-12a69dc109ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rakuten-two.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rakuten-two.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f921185d-0222-5939-afe0-744016f00137","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.rakuten-two.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.rakuten-two.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10ea79a0-e46d-5857-84fa-3c228e8164ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.me-ta-ma-sk-log-in.godaddysites.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.me-ta-ma-sk-log-in.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bbc729e2-96c9-5fad-9bba-3fa1dff37f7f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://kuocnminlogox.godaddysites.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://kuocnminlogox.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64dd7413-69af-5422-ab92-4b3fad3438bf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.binance-referral-code-btcbonus.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.binance-referral-code-btcbonus.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67ae5cd5-c198-5be9-bfc9-9f526a86fefd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://binance-referral-code-btcbonus.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://binance-referral-code-btcbonus.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7133f123-041a-55a5-afb1-d90cf497b650","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://amazon-opfq.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://amazon-opfq.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4020c5be-6c9e-5161-a3e3-c0c4f89bf461","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://yetteli.sbs/flights/index.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://yetteli.sbs/flights/index.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f79909d4-8d96-54ff-bb98-9cc45bc77150","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://yetteli.sbs/packages.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://yetteli.sbs/packages.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--47b7aa5f-b8d1-541e-9cc3-903826dec91b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://im-use-whatapp.hl.cn/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://im-use-whatapp.hl.cn/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2015ccd-2de5-5bbb-b803-555d63ed9657","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://78v6786v8.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://78v6786v8.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1358b5a9-08fb-5436-b7b0-107557f99dce","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://bridallehenga.shop/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://bridallehenga.shop/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9fd0d17-c185-56a5-8515-1ab3703749c1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8b0c57.icefactory.cl/oprdlbcMyNhisYOpw3W5LPYwcpB24Psl47ukBVyjHcY2Q3EgH7yuA19j0qnAHdlU/?rotated=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8b0c57.icefactory.cl/oprdlbcMyNhisYOpw3W5LPYwcpB24Psl47ukBVyjHcY2Q3EgH7yuA19j0qnAHdlU/?rotated=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8564da0-0b44-508a-8bca-b19160f6fe32","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://0f1bfe.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://0f1bfe.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2025af3e-a58c-5fe5-8b51-47510682c170","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.xfinityservice.godaddysites.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.xfinityservice.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bc9d1f0-078d-5dcd-b5a1-8cec026f8bad","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://io-public-trzors-com.typedream.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://io-public-trzors-com.typedream.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--911c50da-bda6-5383-89c0-ce271ab5b735","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://welcome-begin-trezo-en.typedream.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://welcome-begin-trezo-en.typedream.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c62ba42-96a6-52a8-be0c-74708db69b02","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://start-io-trezr-public-cdn.typedream.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://start-io-trezr-public-cdn.typedream.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20b844e7-ad13-50d5-9853-6a28920eac46","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://faq-public-trezro-us.typedream.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://faq-public-trezro-us.typedream.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f02d9b87-722a-5bdb-a8e3-cd4583b599ad","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebooklogin21.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebooklogin21.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f89dee4-b8ff-5981-b407-1868aaef9049","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://004e3a.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://004e3a.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd287036-c08b-58ab-94bf-8727d4117eb4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://netrajs.github.io/spotify_clone","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://netrajs.github.io/spotify_clone']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--156740fd-cb32-5953-b614-7bb5ebf2243b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rootmadhav.github.io/Netflix-clone-2023/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rootmadhav.github.io/Netflix-clone-2023/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b22c111f-8be0-5f4d-a583-c68ffd6bfaf2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.mu/users/9813657376/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.mu/users/9813657376/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e771584-15a1-5bf4-a0fb-f0dc032d98a7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rbcode.net/v/837472845362c642183e731ccf5c32a3","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rbcode.net/v/837472845362c642183e731ccf5c32a3']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e34bcfb-0638-59a5-b333-623d115b2567","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://inlnk.co/JULBW","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://inlnk.co/JULBW']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--173ed503-b579-5082-bce9-65ff129a2294","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebookloginid.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebookloginid.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d74c5df-3bc9-5401-a500-842f8eaf12ea","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://df9709.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://df9709.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eedbaa3-f904-5040-a3d9-23491bd3e03e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://dbea2c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://dbea2c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b5a0a7d-ad6d-5b50-beeb-1054cf2ade33","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://75dbd9.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://75dbd9.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--258de359-7846-5138-b66d-f376a0763a30","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://c38a9f.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://c38a9f.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbe4eeed-5446-5a01-a2b4-f00db23bec9f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://48a2ba.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://48a2ba.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99f96e39-8216-5512-a399-875cc5102d52","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://23aa9d.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://23aa9d.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b6e7871f-6d87-5870-ae00-0207bbb5e5fe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://52b7b2.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://52b7b2.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d4318d01-acde-5099-93fd-3440abe90baf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://21064b.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://21064b.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c5bb9765-88d9-5309-99be-714c7bfe96d1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://nutritious-amethyst-jy6c7lj2.edgeone.dev/home","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://nutritious-amethyst-jy6c7lj2.edgeone.dev/home']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a87ac299-f255-5dee-8675-bfcbeec316e7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://0dddf4.arcadejafet.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://0dddf4.arcadejafet.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5b46ba13-102f-5a39-8d68-fc6b5f60e33a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://startedio-trezox.zapier.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://startedio-trezox.zapier.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0a485a8d-8ae1-5086-8f94-63f4ee9adb37","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bnc-flb.web.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bnc-flb.web.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3518532-cd73-5d3d-b9c2-f32b98032adb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebookloginf.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebookloginf.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bd9eb25c-8c2d-5174-b0a2-5781133cebe9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebooksupportphonenumber12300.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebooksupportphonenumber12300.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7113f6b6-fe73-575f-8a50-7b5d940c5245","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.cashprolivedesk.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.cashprolivedesk.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cdecb4ce-d30c-5a20-a0fb-a31b5e3706bd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://web-trezor-io-start-app.typedream.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://web-trezor-io-start-app.typedream.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0e0e19ae-6677-5827-b045-0723e5391b5b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.ly/users/9623724172/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.ly/users/9623724172/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff285fe7-7650-5bd2-918a-7b160f33b34f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.et/games/5846386835/RetroStudio?privateServerLinkCode=28004710692762680520098075779654&game_id=5846386835&game_name=RetroStudio","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.et/games/5846386835/RetroStudio?privateServerLinkCode=28004710692762680520098075779654&game_id=5846386835&game_name=RetroStudio']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3cf8acee-b253-5c0a-969f-a0485b1ed0c8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://robloxc.com.es/login?returlUrl=190934801","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://robloxc.com.es/login?returlUrl=190934801']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0333591-c226-59ed-bffb-be28df47500c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://robiox.top/home","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://robiox.top/home']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea6f6b3e-5cc8-5cb1-aeda-f09fdf797ac8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://express-dhl-dpe3103d2mga.edgeone.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://express-dhl-dpe3103d2mga.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65759ac6-8909-5ee0-b520-341a64b9b58c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://s4w.in/www-roblox-com-users-950717396-profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://s4w.in/www-roblox-com-users-950717396-profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1327c802-a5f9-5dd8-a2e1-277b1530b2b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://tariasnot.duckdns.org/Docsign00.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://tariasnot.duckdns.org/Docsign00.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbdb99c1-9fa1-5599-ad7e-acd73273479e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://g5.lu/uk3ga","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://g5.lu/uk3ga']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--93b80997-f1ad-54ab-bb99-2c2bf8b849b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://apps-ledgerr.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://apps-ledgerr.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b09a4610-98bb-50f0-b14d-d8a2e22fb34f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://clicks-ledger-live.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://clicks-ledger-live.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff848f19-d839-5f67-b0c7-415042a8ee6a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://access-us-ledger.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://access-us-ledger.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aae3ccf2-32d0-583b-bddf-3022307bed0d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.mouvementacced.app/core/client/rbcroyal/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.mouvementacced.app/core/client/rbcroyal/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db558299-b8d6-5bb3-ad79-59d42cf03cfb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.et/users/437042725645/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.et/users/437042725645/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7acf2c3-6233-5c13-b38d-e7172ede4894","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.mouvementacced.app/core/client/scotia/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.mouvementacced.app/core/client/scotia/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30887959-fabe-5c4f-a890-c74c93be37d7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://dovessrbx.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://dovessrbx.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--844bf33a-ab38-5cc1-9437-780f33bdb144","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://srv1888708.hstgr.cloud/rew/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://srv1888708.hstgr.cloud/rew/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0f0b750-c6e9-5990-878c-8fbfef2149b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://alok-kumar-sing.github.io/Amazon-Clone","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://alok-kumar-sing.github.io/Amazon-Clone']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6b1c569-b848-552c-8d78-faae68fd79d8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp15ct-kavrex-biz-zunven-tavri.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp15ct-kavrex-biz-zunven-tavri.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0baf6e8e-a814-5002-8f66-40e0196ce4c6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://secure-app-tre-jor.wasmer.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://secure-app-tre-jor.wasmer.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36140a88-ea4f-5bd5-965a-5313f5d47a7a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://filmistanstudios.com/mails/alibaba/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://filmistanstudios.com/mails/alibaba/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61bc8caf-0ff9-5570-a864-581f94aa5a3e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://vrushali-janbhare.github.io/amazon-clone","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://vrushali-janbhare.github.io/amazon-clone']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c92fba67-0073-56e2-9218-08a9248fe702","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebookloginreview.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebookloginreview.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4a9beba-2f22-52c0-b0e8-4d52c74295fb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://plaermoxred.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://plaermoxred.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--12e9a37a-cc2f-5597-8a05-8e49c94b3daf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/games/80576062127494/HOT-Catgirl-Obby-Surprise-at-the-end-?privateServerLinkCode=89585493089521937689667490122223","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/games/80576062127494/HOT-Catgirl-Obby-Surprise-at-the-end-?privateServerLinkCode=89585493089521937689667490122223']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3ee998fc-638c-59d1-b06e-8ed58fb9a489","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://grespayw.grespay.web.id/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://grespayw.grespay.web.id/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--033b911f-e577-53db-82a9-91a8c6a6a6b9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://93bb9e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://93bb9e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a65da3c9-b8cc-5dc6-8e8d-b34d185c645c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://e702a1.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://e702a1.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ee298e4-829b-5b07-aa91-d5b8d9be1f04","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a0330c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a0330c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--288bb38b-8a40-5f66-833e-67df6f14a24a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://b1a4fd.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://b1a4fd.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ef5473f-a59f-58a9-83ce-e32426259b8b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://dfrespay.fdnk.biz.id/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://dfrespay.fdnk.biz.id/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--39a2a43b-1d06-59ef-8aec-b7fc0e460ca5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfinityservice.godaddysites.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfinityservice.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3f6fed8a-28ba-5241-b7c3-92a7704ea5ff","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://930898.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://930898.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9589236-d77d-5736-99e1-4da185c03af8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://338874.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://338874.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0cf38d71-d069-552d-9583-5e38cc783654","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a0c31f.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a0c31f.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--966f1e4c-ff6e-59c7-ab81-cc36cc5c3b4f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a95e7b.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a95e7b.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62ab4a46-e973-5287-839f-e06b0793e8b1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://g5.lu/p5tku","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://g5.lu/p5tku']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96d41a51-fe2d-5fa1-b204-89d397c84ad3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/users/244432464839/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/users/244432464839/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d11cf1ca-ea3a-59f9-87a1-e242567030be","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a004ef.icefactory.cl/z1fDlFv2ERntwcitD5KbGNZK4XsGAfD7mMGadbVv9bmihF3xzQrpO30EKqkZDuJd/?rotated=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a004ef.icefactory.cl/z1fDlFv2ERntwcitD5KbGNZK4XsGAfD7mMGadbVv9bmihF3xzQrpO30EKqkZDuJd/?rotated=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1c24989-08c6-50e0-93dd-38ee445e95f7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://d482fb.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://d482fb.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23916a77-ab73-582e-a3cd-c9d93ed3098c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://robloxcondo.my.id/jun7x1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://robloxcondo.my.id/jun7x1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb486cb5-0695-5d17-998f-e990313f527e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://7b591c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://7b591c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e60fdbe6-d72a-5352-ae76-b4ee03c151bd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://aea1d5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://aea1d5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fe1dc838-3dcd-58cd-9bc0-684b1f9c6c5b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebook-carol.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebook-carol.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6e8210e6-7c7f-514f-9c38-39af58d93555","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://perturbed-univer-d5a135.bestoptiontrade1.workers.dev/373d5a135.xlsx","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://perturbed-univer-d5a135.bestoptiontrade1.workers.dev/373d5a135.xlsx']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62dd92be-77bb-5907-b090-55ef020a827e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://0b2cdc.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://0b2cdc.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf286a1a-8476-5e96-b210-45b3a967384f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://loginfacebookverification.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://loginfacebookverification.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--210d7e52-3162-5da6-8906-9776c56eb44b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fccc69.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fccc69.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--80fb721e-5b0c-573a-b935-64ff833925c9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://efe794.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://efe794.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--43e4600a-187b-5187-b884-8ce887bb103c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://anirudhsajeesh0.github.io/Siteclone","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://anirudhsajeesh0.github.io/Siteclone']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--95625cb6-2819-5ae6-9e1e-878528aef3cc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://laibakhan139.github.io/netflix-home-page","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://laibakhan139.github.io/netflix-home-page']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2424eb25-90cd-5857-a4a8-74a865e892f8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://appleservices.alwaysdata.net/ref/?_fm=71a724b20779","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://appleservices.alwaysdata.net/ref/?_fm=71a724b20779']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ae6788a8-c789-560a-a682-27c58165f2eb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://s4w.in/www-roblox-com-users-9501716396-profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://s4w.in/www-roblox-com-users-9501716396-profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b78b8893-c4ea-5509-b037-896ca9f29d44","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://2897d4.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://2897d4.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb06adec-6fa7-53f4-b654-b377b18d1edf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://instagramfollowers146.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://instagramfollowers146.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a81dcbfe-5ef0-5fce-ba77-55f4de4b7abe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://00hwee-9rck-fuj-bvii3-y210am.pages.dev/qaz-wsx-edc-rfv?welcome=106906109377741&token248=106906109377741&name_token136=Lippert%20Marine","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://00hwee-9rck-fuj-bvii3-y210am.pages.dev/qaz-wsx-edc-rfv?welcome=106906109377741&token248=106906109377741&name_token136=Lippert%20Marine']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--09844854-3b9b-5269-aa6b-636b97ca187d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.pt/games/88519281604403/Build-a-Baddie?privateServerLinkCode=99382535900423182128231632453729&game_id=88519281604403&game_name=Build-a-Baddie","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.pt/games/88519281604403/Build-a-Baddie?privateServerLinkCode=99382535900423182128231632453729&game_id=88519281604403&game_name=Build-a-Baddie']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8e76113-f5cd-51a6-8f05-262bf68bdf1b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.pt/games/103372023280442/Brainrot-Tag?privateServerLinkCode=99382535900423182128231632453729&game_id=103372023280442&game_name=Brainrot-Tag","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.pt/games/103372023280442/Brainrot-Tag?privateServerLinkCode=99382535900423182128231632453729&game_id=103372023280442&game_name=Brainrot-Tag']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--260eb1d7-9915-533d-b3f6-b3276a844428","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://connec-treoz-bridge.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://connec-treoz-bridge.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--610fd4fc-5cf2-57c5-ad69-c72367664c30","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://biturbo.com.pk/Inbox/online.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://biturbo.com.pk/Inbox/online.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b72bdb2-0514-5b0d-b9ba-576c59f5be0d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://06249e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://06249e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f28a114-8a06-5b3a-b480-8d096afce725","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://5b0307.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://5b0307.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c4895c5-4e3e-556b-9147-c40e45d06ad8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://34711b.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://34711b.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7132cbab-97d7-59c2-9c12-9214f3068f37","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://dc488c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://dc488c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--790eaab0-ffd6-50bf-a931-d97cf66bc4ba","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://7f55ef.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://7f55ef.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb7e5c8a-e80a-5618-aae7-f6aba80de809","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://7d7be1.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://7d7be1.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8cad05ae-4270-5ec8-a583-a743d5a35efe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://efe114.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://efe114.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa5e2a74-6fc5-5c1e-869a-89ce1efa8fd6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://d44bd3.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://d44bd3.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb567ee1-52ef-5ca3-93ee-42c28502f780","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://666c8b.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://666c8b.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a53a0aa8-b33f-51f7-ad7d-bca109c27303","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://4233e0.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://4233e0.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8485ad62-6b72-5c73-97cc-7be208407539","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://802811.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://802811.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5d6e4c6a-0fc8-5388-bbd6-55aa12ac6f8b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://733ef5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://733ef5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--930da6c3-e57a-5ef6-b8d3-ff4dd2c6418b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://mass-orange-drrrexhk.edgeone.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://mass-orange-drrrexhk.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad23c055-fffc-54cf-9ebf-4db9b8389c0c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://zkbsicherung.com/login","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://zkbsicherung.com/login']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af70bf6d-9d57-52e2-b94a-97ad4b6eb9af","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fbf1d9.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fbf1d9.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ff2a2908-a979-56c1-977a-1748307f0552","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://7ddc0a.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://7ddc0a.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--020c3e6c-5a48-56fd-9fd4-f1170b7891e0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://yjbcei4l.rqug4s3.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://yjbcei4l.rqug4s3.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6f160927-2754-5394-a809-afb2fae75b08","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://chain-swap-interface-v2.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://chain-swap-interface-v2.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4af1d89e-55e5-5c43-8131-41514903bdb2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.chain-swap-interface-v2.vercel.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.chain-swap-interface-v2.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--25c36121-b675-500c-a703-b4067eaa77cd","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfinityverifynow.weebly.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfinityverifynow.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b0fc77f2-35e2-59ef-a091-f1a195eee144","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.accountfacebook.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.accountfacebook.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45340d61-8513-5769-b772-06688c4f53ac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfinity-signon.weebly.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfinity-signon.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--121aad18-2a35-5968-ae61-0a064df0a0fc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://vormora-zxt-lenqumi-c8x1fc67.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://vormora-zxt-lenqumi-c8x1fc67.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9d80a64-1694-54be-981b-27274dddb286","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://net16ct-toru-biz-vemi-zano.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://net16ct-toru-biz-vemi-zano.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dfacca4-ab27-5472-9020-90a60ddfb47c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://vnzkt819m-msprq341k-2a4e-xlb59p.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://vnzkt819m-msprq341k-2a4e-xlb59p.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d5dfdbd-b370-5506-9bc2-8ba23912abe8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://virat-kohli10.github.io/paybox-demo","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://virat-kohli10.github.io/paybox-demo']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36fed750-1801-5475-bf2f-25b6e5bf8774","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ffacebooklogin.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ffacebooklogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--69581e2e-bc4a-5e6d-bee0-276108a018b6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.ffacebooklogin.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.ffacebooklogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac50f4cd-4097-52b3-92a7-8b89190f8bce","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://newbreedlifearts.org/font/korea.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://newbreedlifearts.org/font/korea.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b48bdea5-7a07-57c2-a23d-1a36ed49661f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://28610d.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://28610d.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb22aeb6-f329-5f98-878c-086309f6020f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://metamuxsklogen.gitbook.io/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://metamuxsklogen.gitbook.io/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b062ea0-15d3-5853-b66c-769ca5b87e3b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://18aafc.winnicart.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://18aafc.winnicart.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c6826d7e-b9d0-583f-abab-a130a8e6b817","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/communities/894988425313/One-Time-YT","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/communities/894988425313/One-Time-YT']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ebf58e2-b5dc-5672-ad20-fac519d32102","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://connecte-bridge.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://connecte-bridge.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2854079e-82b8-5531-99c6-22d61d328941","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://1cadf3.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://1cadf3.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ca61c79-6c7a-51ab-bc67-1ffd1df83b98","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://1ecdb5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://1ecdb5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--87bf1091-463b-5a58-ab53-e6c02be4d0c4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://d90a71.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://d90a71.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d75fcb48-0977-5413-a21f-34c07695cf00","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://3c5d30.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://3c5d30.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bec1a6de-ed9e-5df9-918d-4712e206b12f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://e52f7e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://e52f7e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9f8b1268-a2d7-5ac9-8256-4ce660f6ccdf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fab207.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fab207.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f89b1c8a-8914-57a2-bcc1-bd0de2114f29","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://1df173.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://1df173.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96fa3d49-6da0-504f-b22f-d7fbd1e2754a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://c67030.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://c67030.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1ca1c88-cb6a-513a-9db7-c1539417bd54","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://431b3d.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://431b3d.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42327a55-ed98-5be3-b49f-ff14a5a77366","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://5e20c6.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://5e20c6.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4917a75c-7e05-5cfd-9dd9-280eb7d3dcd0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://robiox.com.gr/users/1062443811/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://robiox.com.gr/users/1062443811/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--db34dce0-f250-5329-9383-7a3d001cffaa","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://c08923.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://c08923.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a1d40226-5887-5925-a1bb-4847bef881e3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sock-zizifn-jp.ludea-lau.workers.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sock-zizifn-jp.ludea-lau.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36234490-651f-5de6-8b37-58e2bcdd42d5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://nhzn-ju8-gh5-64ls-gfewy-4vo.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://nhzn-ju8-gh5-64ls-gfewy-4vo.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d264a52-76b3-5ae2-84cc-574f12206009","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp15ct-zorqel-biz-melven-qavix.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp15ct-zorqel-biz-melven-qavix.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d0130d7-e9d7-5a95-9447-7c21c66084c9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://zanquro-zxt-melvani-p5t8dk31.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://zanquro-zxt-melvani-p5t8dk31.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f09239f-a11e-5112-b80c-f9b5e3d2408c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://accountservicescenter.co.za/?r=2936e486-3960-4b99-9e03-f1a94bfde3ae&rg=eu","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://accountservicescenter.co.za/?r=2936e486-3960-4b99-9e03-f1a94bfde3ae&rg=eu']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ea2135d6-1b28-5f9f-a1a9-7b990af61138","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://qualitybh.art.br/fil/sd","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://qualitybh.art.br/fil/sd']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da32cd16-d543-5dd2-a691-37eab990c1a1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://mailer6-ver.mdbgo.io/?eta=3mail@a.b.c0/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://mailer6-ver.mdbgo.io/?eta=3mail@a.b.c0/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd92a3e4-152b-5e25-9a43-5a40e09ea34d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8d073d.winnicart.com/Gm6LsNjhFl7AmAOqY4Z3yCIdBk39z8cURNcefd3tgecgnhKFIdhPPqlaUtwICbnW/?rotated=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8d073d.winnicart.com/Gm6LsNjhFl7AmAOqY4Z3yCIdBk39z8cURNcefd3tgecgnhKFIdhPPqlaUtwICbnW/?rotated=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f65e641f-32df-520f-8db1-b074d2214135","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://b000e9.winnicart.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://b000e9.winnicart.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a8280e94-80a3-5cd6-a553-0ca3d2efde36","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://msjihasx.us.cc/5g/home.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://msjihasx.us.cc/5g/home.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--38b6a96b-4d1a-55f4-ab2e-819723a28501","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fortnate.top/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fortnate.top/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3aefdd03-2ed6-5af2-ac21-8736e7d32be5","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://shopeeinc1111.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://shopeeinc1111.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d48cf293-4188-55aa-9852-e34e72df054b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.shopeeinc1111.blogspot.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.shopeeinc1111.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4c0be312-03aa-5591-961e-0dc23311c867","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://mxhaisyx.us.cc/5g/home.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://mxhaisyx.us.cc/5g/home.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55abf73b-2592-5b81-a7b0-6566184854f4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://mksjidux.us.cc/5g/home.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://mksjidux.us.cc/5g/home.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d341195-afdc-5213-bc49-7fb66fce99fc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fecb46.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fecb46.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fc0eb56-bff2-50c9-b929-52263f8466f4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://567536.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://567536.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba905726-2650-579c-9b4a-daf3d0d7c911","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://validarm1c-0s00.webcindario.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://validarm1c-0s00.webcindario.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bf50502b-c98e-5687-bd55-bb165655c4e1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://logan-blokiie-us.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://logan-blokiie-us.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a976bb3-d08d-5b61-a3ed-25d10dddbbe6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://misilabario.cl/alibaba/alibaba/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://misilabario.cl/alibaba/alibaba/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa45aee1-e186-5ee0-bc4a-791e6d5a251f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.xfinityrefunds.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.xfinityrefunds.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a57b88-30ac-5c71-99a3-786c5f9e74bc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://0ficinavirttual4.site/index1.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://0ficinavirttual4.site/index1.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--722bfc07-ff8b-5df5-8803-80c6d88364ed","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://0ficinavirttual4.site/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://0ficinavirttual4.site/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--458a46bf-af2d-54e0-8f9e-3cbe941f0352","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bf5893.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bf5893.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00a86e3b-215a-52bd-a7da-558871e74fbb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8be6e8.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8be6e8.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--278aef9e-2fc4-5dc5-b177-9d958770057b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://aedaa5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://aedaa5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc7c203-ba46-5381-9a39-61c2145397c0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://sp13ct-vormik-biz-frandel-kazdor.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://sp13ct-vormik-biz-frandel-kazdor.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29c76a63-34fd-5196-aef3-6176755c9e34","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://bai.infura-ipfs.io/ipfs/bafkreifg5u6op7zz6su3tg53j6ftrg3brcaiphlilet2wwqgobzziiunha","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://bai.infura-ipfs.io/ipfs/bafkreifg5u6op7zz6su3tg53j6ftrg3brcaiphlilet2wwqgobzziiunha']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a883249-3fd6-5bcd-bf03-e91ec1f2d800","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://blog.ubair.com/anotherday/app/captcha.php?redirect=%2Fanotherday%2Fapp%2Findex.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://blog.ubair.com/anotherday/app/captcha.php?redirect=%2Fanotherday%2Fapp%2Findex.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--621c8c9d-05f6-5db7-8b15-fa1319315e00","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://blog.ubair.com/anotherday/app/index.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://blog.ubair.com/anotherday/app/index.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1b6e1df-79b6-50e6-9190-7e0a8b025a84","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp15ct-vurvex-biz-nurzen-zorli.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp15ct-vurvex-biz-nurzen-zorli.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68804c4e-86cd-53f9-862d-58cfdf4e591f","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://9d16d5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://9d16d5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f296271-d238-58ae-b7e1-19de7272b0bb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebooksupportphonenumber12300.blogspot.com/?m=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebooksupportphonenumber12300.blogspot.com/?m=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ace1239-fdde-5c6f-8bab-927be5896728","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://coderkubes.com/duke/index.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://coderkubes.com/duke/index.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--afa7a25e-2e87-5e14-9371-fef54c791535","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://97ee8.catex.at/cnbcard/cab3994js.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://97ee8.catex.at/cnbcard/cab3994js.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b9b95b50-5e69-5e92-8407-abf4510f3df1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://97ee8.catex.at/cnbcard/cardentw.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://97ee8.catex.at/cnbcard/cardentw.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--36ff03b4-bab1-5398-8231-1f9cf3c53495","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://97ee8.catex.at/cnbcard/signin.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://97ee8.catex.at/cnbcard/signin.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--77dd904f-a04f-5b4d-9b02-10aebdd190bb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://smilling-long-pannel.edgeone.dev/?eta=torikpro@0f52f931ef5f3d9424a897162d0e1cfba9c2.com","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://smilling-long-pannel.edgeone.dev/?eta=torikpro@0f52f931ef5f3d9424a897162d0e1cfba9c2.com']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9a2a8bb-f6ff-5109-8cc8-0ac3183a06f4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://ccer-hfa0fmdue4ebhcbd.z03.azurefd.net/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://ccer-hfa0fmdue4ebhcbd.z03.azurefd.net/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f0a4d425-8baa-50bd-b51c-c97530b9f2c4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.mu/users/3929354400/profile","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.mu/users/3929354400/profile']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--45b7f334-5690-5a85-b258-976fc2385c91","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://deanschneideroasis.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://deanschneideroasis.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7d72020f-694d-5092-998c-4b3c8ba656a0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://us-support-ledgor-en.pages.dev/page4.html/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://us-support-ledgor-en.pages.dev/page4.html/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b3c1374-d0f1-5c24-8663-c60e1b6a97ef","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://6062fd.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://6062fd.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91103f0b-61d3-582f-8d13-df5fbe3539dc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://4255e4.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://4255e4.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb1678be-556b-5081-8825-9c1db9629e21","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://f6676d.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://f6676d.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ed181c37-8a99-5f67-af9b-be2002232def","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bd2de7.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bd2de7.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50a8c33a-7276-5997-9e95-627623304dfe","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://f73f3c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://f73f3c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c852796d-7a0f-5f25-9a47-d9aacd3b6123","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://2fa6a4.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://2fa6a4.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85158b83-c302-5da1-a5be-393042b3a4e6","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8bfe2e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8bfe2e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fb36ef13-a5e8-5484-8602-5b9084639e8b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://f784a5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://f784a5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ead11b45-9692-5f3d-a3f1-1c9cfb425cb4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://3009de.icefactory.cl/htp4NS9mxacptre8XAgCjYiV4xQBm0F6YKIPhgOSaazIP4RZWyGpCO7tAstUGSpp/?rotated=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://3009de.icefactory.cl/htp4NS9mxacptre8XAgCjYiV4xQBm0F6YKIPhgOSaazIP4RZWyGpCO7tAstUGSpp/?rotated=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--582abeb3-986a-5833-a6fc-f2d988f45893","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://ce5e30.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://ce5e30.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00c3108f-3a25-5f4e-ad21-698a5fae0bae","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8f93ee.icefactory.cl/plQZiQcKliKJpcE0vLiUXtZ0xra45CerGQA00X13RWRPAqIHuyMpMD4oHxJ7BaLt/?rotated=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8f93ee.icefactory.cl/plQZiQcKliKJpcE0vLiUXtZ0xra45CerGQA00X13RWRPAqIHuyMpMD4oHxJ7BaLt/?rotated=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06c99869-1a21-50bb-bfb6-0d4d7398a535","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://779a0e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://779a0e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3e7c982-2a7a-5956-b66d-f97e1a6775b2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://cf.1689888.xyz/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://cf.1689888.xyz/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1f2fd81-27ff-5f96-9d66-18ba1b58a6f8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://aktivasi-fiturxdana-pay3.yums.my.id/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://aktivasi-fiturxdana-pay3.yums.my.id/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c096856a-3b91-5578-ad04-9dcaa11f8d6c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://creditoecuador-2026--creditopichi38.replit.app/?monto=10000","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://creditoecuador-2026--creditopichi38.replit.app/?monto=10000']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f8240ad2-0e8b-5767-8881-4d349d05d587","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://creditopichinchaecuador-2026--creditoenline3.replit.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://creditopichinchaecuador-2026--creditoenline3.replit.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--68bde7d5-3a20-56e1-aa9f-69c3d070d1c0","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://portal-de-desembolso-pc--agzc3668.replit.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://portal-de-desembolso-pc--agzc3668.replit.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8373682-cdd2-5b57-9d14-666a381334f1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bn/games/2753915549/-Blox-Fruits?privateServerLinkCode=86312608205244302093175058016356","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bn/games/2753915549/-Blox-Fruits?privateServerLinkCode=86312608205244302093175058016356']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35334d82-5f0c-5daa-ab69-ba05bcb06066","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://s4w.in/Blox-Fruits-private-Server-Code-86312608205244302093175058016356","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://s4w.in/Blox-Fruits-private-Server-Code-86312608205244302093175058016356']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--00e6b90c-e4c7-52ee-ab8e-acabe35748c8","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://center.verifiblueprofilesecureai.cfd/index.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://center.verifiblueprofilesecureai.cfd/index.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cc9a98ea-cbae-5735-bf01-7745bc7d506d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://center.verifiblueaccountstatusai.click/index.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://center.verifiblueaccountstatusai.click/index.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ce0f5b92-db57-58f7-8f3a-d4a3da5aee46","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://auth.verifibluebusinesscentermetaai.click/index.html","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://auth.verifibluebusinesscentermetaai.click/index.html']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0739fe0c-8a87-582b-a5ae-3e38693ce2c7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://gitnikit.github.io/phisingsitefacebook","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://gitnikit.github.io/phisingsitefacebook']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7e8af548-c5f0-5537-b344-9e6314943bf4","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ucdgxfhcgjhvkjblk-dp6se8xlrpxx.edgeone.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ucdgxfhcgjhvkjblk-dp6se8xlrpxx.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--417fa630-c947-550e-9380-c9ba769df392","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://skilled-gold-etzyiudb.edgeone.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://skilled-gold-etzyiudb.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--41803df4-eebf-565f-8f8d-697de4229f7e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp13ct-pravdor-biz-kersik-frandel.pages.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp13ct-pravdor-biz-kersik-frandel.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--85b70610-c226-595e-aab4-6c47f5d0f3d3","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://secure-nexo.com/review.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://secure-nexo.com/review.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d53898dc-f788-584e-945d-64ad8d860a17","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://secure-nexo.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://secure-nexo.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7915e57c-ec3a-5085-a09f-58d2761293f2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://los108.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://los108.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c1d4504c-a9c5-5b9c-8060-2447e6da1809","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://bogodukhov.com.ua/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://bogodukhov.com.ua/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72e3c5f5-bc6a-5ce3-b48b-5f38383d84e2","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://relay-fr-me.com/connexion.php","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://relay-fr-me.com/connexion.php']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3192b06c-c243-5c3c-bac2-c655e23dee5c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://relay-fr-me.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://relay-fr-me.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fcd05d0a-0cd6-503b-8211-0cac125c112d","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://staticfile-kimkaro66.wasmer.app/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://staticfile-kimkaro66.wasmer.app/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64760c1e-eae1-55c5-abae-bc8dee20aecb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://motiva-rodoviadigital.com/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://motiva-rodoviadigital.com/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--64569cb4-ae6a-5a9e-ae0d-dc85ee050f4b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8bf1b6.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8bf1b6.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7b66dfce-b926-54b0-9156-4aec1bec6e74","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://4d2582.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://4d2582.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c2563212-ea88-5eb4-a427-a84881dd7aae","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://81ef2a.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://81ef2a.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1c127029-584c-5985-af28-c1583502d106","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://df63ff.icefactory.cl/ksiernCZ4HYpjtK68wPm52ZTufIAomjS1w79usIbBVc5J3nhoAQa4dqRKO0GKdyp/?rotated=1","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://df63ff.icefactory.cl/ksiernCZ4HYpjtK68wPm52ZTufIAomjS1w79usIbBVc5J3nhoAQa4dqRKO0GKdyp/?rotated=1']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cf4b969-fa26-5546-8ac4-145b2fd5f962","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://df4f2f.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://df4f2f.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c56cbaf-3cba-52c1-9753-ccfbf67d025c","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://4bc19e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://4bc19e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32a7a2f0-0f69-5d18-9d0e-f717d4f23c60","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://d9854f.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://d9854f.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--75eeb69a-a151-51a8-8ce6-ad5c84cbaeac","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://97479b.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://97479b.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--918f1bb6-4b05-5730-a26e-c034dfcc2985","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://5f98ad.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://5f98ad.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d5a66f1-e5a0-5ffd-a5b8-bc55b5fab9cf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a31cf6.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a31cf6.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9973aa53-3776-5f11-80ca-d82ee11c130a","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://10920c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://10920c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3b51722-0647-5511-b21e-2080e3674788","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ecf7d6.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ecf7d6.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--52601541-de89-5ce5-8ec9-d4a91dfdc763","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bb2f98.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bb2f98.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--713a6ea3-6fb1-541d-b1b9-04cedbbe8651","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://21c52f.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://21c52f.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1369c642-a203-5465-a33a-76016fd3aa0e","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8feed4.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8feed4.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b5828190-e974-535c-afd8-42d0fd4a19fb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a2007f.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a2007f.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daed9f3f-6fb9-597c-af42-532d325a0615","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://1b0466.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://1b0466.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b297f673-427c-5d73-a6d2-6fb6cc855abb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://8b3a0a.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://8b3a0a.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faa6c370-0814-5d8e-8055-281af43aaecb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://f29f9b.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://f29f9b.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b367e6b-e0aa-5f8d-b192-462968ae9ccb","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://b32aaf.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://b32aaf.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b2b3eba3-41d4-58e1-9d3e-308d5f0e2b14","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://a1a4ab.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://a1a4ab.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82040793-6856-51ac-8d77-5bf2b2e7ddb1","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ae1d2c.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ae1d2c.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b5f10b7-df94-5753-af68-c083ed5000d7","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://f65299.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://f65299.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1e4e03e-23ec-512b-b1bf-adf7834d1ced","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://promt-dpem7p8ov9s7.edgeone.dev/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://promt-dpem7p8ov9s7.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e152bba6-9a5a-5fff-b1cc-4f5d944598ce","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://641f8e.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://641f8e.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0811b40e-4897-531f-8e61-3b60974490e9","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://17cbf5.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://17cbf5.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--449db705-430b-5b7d-b1d3-d93455b4dbdf","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://b268b9.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://b268b9.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d82fa8e6-d84d-5ed7-aaa5-a98eac209c2b","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://d6dc84.icefactory.cl/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://d6dc84.icefactory.cl/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a2eb1134-0d79-5f3d-9be9-423791ddc7fc","created":"2026-08-11T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://micr0sft.github.io/fdgdfg/","description":"Aggregated from open source feeds. Score 69/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://micr0sft.github.io/fdgdfg/']","pattern_type":"stix","valid_from":"2026-08-11T00:00:00Z","confidence":69,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--415c94eb-643c-5b68-927f-e39f014d2849","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://x39p.top/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://x39p.top/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b6385ef-eb6c-51fe-a2e1-11194d804d2c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.netflix-clone-opal-iota.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.netflix-clone-opal-iota.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61b14cf1-9253-5885-961e-22871ad43784","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://mansithakur204.github.io/spotify-inspired-music-player","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://mansithakur204.github.io/spotify-inspired-music-player']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0dcb20fc-ec01-5c60-af89-b50b5a30dbc9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.site-jn6w55wca.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.site-jn6w55wca.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--641a4b9f-372b-553a-927c-91c002ed6818","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.instagramfollowersfake.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.instagramfollowersfake.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbf65378-2ef9-5472-858c-9eac4d13c4f8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.faceboomlogin.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.faceboomlogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--031cf1f5-00b3-565b-9c98-4d588bfcf958","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://addons-moz-illa-org.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://addons-moz-illa-org.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--af7c9888-cc97-5d8b-8df6-361e9f8758b8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.xfmailconnect.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.xfmailconnect.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adf6d6e4-3618-5ab4-bf44-5f2c5a34402c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://nlink.at/www_roblox_com_users_7324139977_profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://nlink.at/www_roblox_com_users_7324139977_profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1880ddb2-8af9-5c79-97a6-3a3f96a9bb87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/users/133565866456/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/users/133565866456/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--59e6c1cf-7d6b-5650-b534-88bb9bb518e8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.comcastxfi.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.comcastxfi.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c78aa1d0-484d-52cc-9d9f-fe014f4da610","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.c0nectt.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.c0nectt.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--63f3da63-d2bd-50b4-adb1-7f05dcfa6cb6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rechnungdirekt24.com/public/de.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rechnungdirekt24.com/public/de.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ebfb902-db20-58bf-bf21-2091581ef0c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.pt/users/282030707450/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.pt/users/282030707450/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d6521623-5929-5378-90e2-e2d5917a10d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.tranifer-bnb.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.tranifer-bnb.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfaf1a2c-0cd6-5f5e-a890-fc4cca902c13","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.netflix-clone-gray-iota.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.netflix-clone-gray-iota.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49dea29a-bfab-5934-a008-f486147fca0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.site-ah3d6z3ed.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.site-ah3d6z3ed.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--798e734c-9892-5026-ac87-c2f276a9530f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://25f54b2b-58b1-45c3-bd24-0ee1c8e9cfd0.selstorage.ru/524/52462818748/bcb/52462818748_bcbc735fc613264a17e73dd987c14ae8.jpg","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://25f54b2b-58b1-45c3-bd24-0ee1c8e9cfd0.selstorage.ru/524/52462818748/bcb/52462818748_bcbc735fc613264a17e73dd987c14ae8.jpg']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--76a731da-a9f1-5c39-8524-498b82eca21c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://hnhpvt.website/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://hnhpvt.website/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c4e75357-c672-5b0a-bf93-ab960520d066","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebook-2-0-dun.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebook-2-0-dun.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d78069f0-c222-5268-a56e-eabb8eb1f850","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://robloxc.com.es/users/190934801/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://robloxc.com.es/users/190934801/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--954fe96f-6ab7-54e4-bf25-facf8056f0f0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.site-mjemyma8d.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.site-mjemyma8d.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a0016698-0ec2-5bdb-bfa8-0f9e9c87b2fc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://xlbdw5avstr-ycgfnmja-8d9e2f-xlq20c.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://xlbdw5avstr-ycgfnmja-8d9e2f-xlq20c.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--19ff100d-0da4-58fc-917f-a2ddada891a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.cancelacardiffseguro360.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.cancelacardiffseguro360.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1bada4a5-b22b-5150-b3bf-0fc6b99f0350","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://polite-bavarois-37ef3b.netlify.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://polite-bavarois-37ef3b.netlify.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--72fe1b9c-3dbb-5241-99f0-99ea19059236","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://roblox.com.pt/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://roblox.com.pt/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6b35453-7f90-541f-86a2-bc4e56eb6d87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://virtual-personas.de/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://virtual-personas.de/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4a280d0c-75e0-5a32-bfaf-83557412d575","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://norqula-nqx-zentora-p1t7dw65.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://norqula-nqx-zentora-p1t7dw65.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b893d637-1782-5051-9778-beafc7600b87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://long-cake-a10a.buidebidexlvtey.workers.dev/meta.help","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://long-cake-a10a.buidebidexlvtey.workers.dev/meta.help']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ead5cc60-93eb-5394-a2c1-a093ef833fe7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://naybabuta.github.io/nay-tify/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://naybabuta.github.io/nay-tify/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3024ab0a-d5e4-54e4-8d51-0c3489b1ad75","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rblox363.github.io/roblox-lg/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rblox363.github.io/roblox-lg/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--424cad7b-f90f-56b6-b362-bab896699dda","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rblx3.github.io/rblx/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rblx3.github.io/rblx/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--67aab2db-287c-53a8-ade5-492d9c294bdb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://xelmavi-vrk-belquna-p2t9dk81.pages.dev/send_appeal_request","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://xelmavi-vrk-belquna-p2t9dk81.pages.dev/send_appeal_request']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1abaf486-68c0-58d3-a27b-cb70571b12b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rblox363.github.io/rob/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rblox363.github.io/rob/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa310acd-db06-5f53-946d-eb10d439e034","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://locketheart.org/proj/oneapp","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://locketheart.org/proj/oneapp']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7af0df9-233b-5213-964a-1c397ab8cf07","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp15ct-zavven-biz-korun-qelix.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp15ct-zavven-biz-korun-qelix.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--322f18a2-df9b-5084-942d-152b2ccd1f2b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://7ro-wwv-ftvh-2np810-9v8crh.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://7ro-wwv-ftvh-2np810-9v8crh.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ddc1b9f-e4a1-5a84-aa73-e281176ca473","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp15ct-turqel-biz-zunax-kavro.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp15ct-turqel-biz-zunax-kavro.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--27871344-77a3-57b0-9de9-67e9578289f5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.gr/games/8737899170/-PIATA-MAZE-Pet-Simulator-99-?privateServerLinkCode=87969680078065820214840649414941","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.gr/games/8737899170/-PIATA-MAZE-Pet-Simulator-99-?privateServerLinkCode=87969680078065820214840649414941']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f10e988a-97e4-5e10-8a49-8baba07a3ad5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://login-soporte.iceiy.com/?i=1","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://login-soporte.iceiy.com/?i=1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ef73010-3907-527c-88ca-b6be672ae7f2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://i.gal/ZmUim","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://i.gal/ZmUim']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f0baa96-11f2-5d15-bdf9-991e996ec99a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.hotmailskjfhurytnadinbox.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.hotmailskjfhurytnadinbox.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cbfaa2b-3ce5-5121-9540-11fabd8b73cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.blox-drop.online/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.blox-drop.online/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--73248b89-308d-5e97-b5e2-a96d38dd3824","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://goo.su/mchiajsi","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://goo.su/mchiajsi']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--da6e0e12-450a-5fc3-9682-cc21543454a3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fb-faceboook.blogspot.com/?google_abuse=GOOGLE_ABUSE_EXEMPTION=ID=177b9949f8930038:TM=1785479352:C=%3E:IP=2605:fe80:2b:105:1c00:5fff:fe00:292-:S=rEAZNIrShlz_CMcj-uQ9MQ;+path=/;+domain=google.com;+expires=Fri","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fb-faceboook.blogspot.com/?google_abuse=GOOGLE_ABUSE_EXEMPTION=ID=177b9949f8930038:TM=1785479352:C=%3E:IP=2605:fe80:2b:105:1c00:5fff:fe00:292-:S=rEAZNIrShlz_CMcj-uQ9MQ;+path=/;+domain=google.com;+expires=Fri']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65cc569f-9bc4-53b7-8de1-00eecce4e9e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rroblox.wf/share?code=96041925588136299153057679665385&type=Profile&source=ProfileShare&gameid=2753915549","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rroblox.wf/share?code=96041925588136299153057679665385&type=Profile&source=ProfileShare&gameid=2753915549']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dca912c3-055c-5e53-9ae5-9f80a86e5964","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ig.do/Blox-Fruits-private-Server-Code-1013231241732343237023930417434378","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ig.do/Blox-Fruits-private-Server-Code-1013231241732343237023930417434378']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3a8480b3-a9de-55c3-bc45-b16d47191962","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebookloginsignub.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebookloginsignub.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ea6fd94-cc03-5412-838b-d083dbd4b346","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://vismayamanoj029.github.io/amazonclone","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://vismayamanoj029.github.io/amazonclone']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58ba4b37-d305-5e7a-9efb-4e951cfb5bef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://techwithmanishhq.github.io/Spotify-Clone","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://techwithmanishhq.github.io/Spotify-Clone']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5cda6c6b-f002-525b-a220-c8a9b0641240","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rimmisharma25.github.io/Netflix","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rimmisharma25.github.io/Netflix']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--99efaedb-266f-500a-b363-7052f89e6d81","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://fastidious-tanuki-1d7a77.netlify.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://fastidious-tanuki-1d7a77.netlify.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7816c2ce-478a-5769-8e55-b3ccc80981d0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://just-aquamarine-5n8epwhf.edgeone.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://just-aquamarine-5n8epwhf.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--06b3f76d-fced-5c96-881b-fcae5e067fe3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://trk-gol.aphipa.info/Y2gtZmVkZXgtMjAyNg/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://trk-gol.aphipa.info/Y2gtZmVkZXgtMjAyNg/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bdf8e70f-3bcf-5ff1-81b4-a35e2fc36a78","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://site-zkmjek3ad.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://site-zkmjek3ad.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--04126dcd-54ef-5112-a1a9-bf1bf46ef1d5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://raiffeisen-five.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://raiffeisen-five.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f3c158aa-8461-527b-9716-b15c7651612b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebook-freelogin.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebook-freelogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca484795-f106-503e-a9a0-eb696945c1d1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.myaccountxfinity.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.myaccountxfinity.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32cc2fac-b1af-589a-b00e-004a4a5a38ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://seasharetip72-ed101816bbdf.herokuapp.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://seasharetip72-ed101816bbdf.herokuapp.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5dc2a76b-e387-59a3-b14d-ab7282cb75e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://dmivok-trelna-2ed83f-vjbyh-6cb712.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://dmivok-trelna-2ed83f-vjbyh-6cb712.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d7ced632-1387-598b-b975-9d51fb21ddea","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://arshad-deshmukh.github.io/Amazon-Clone","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://arshad-deshmukh.github.io/Amazon-Clone']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f7a6e336-6896-589d-96b9-bdd05c013f2a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.xfiniity-update.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.xfiniity-update.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--486a3875-80a5-56a2-a3e2-f5d3a1752355","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://mchiajsi.us.cc/5g/home.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://mchiajsi.us.cc/5g/home.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dafd60bf-9fa6-5f16-8b3c-57dd32ce3a95","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ybfch2ekqlo-mvrqllos-7c6d3a-ybf33w.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ybfch2ekqlo-mvrqllos-7c6d3a-ybf33w.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c9e02375-792a-511b-80b6-13b1005e8ffc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://xfintyloginupdate.weebly.com/xfinity-sign-in.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://xfintyloginupdate.weebly.com/xfinity-sign-in.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d964eb2-6daf-5f12-b4dc-a5c66fad63d9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://arubaservizispid.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://arubaservizispid.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--31b2857c-e8e1-5fa7-b495-e6529c7a8e14","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://sp13ct-kersik-biz-fransor-hazvik.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://sp13ct-kersik-biz-fransor-hazvik.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2130f026-ee0b-5472-a6ff-45217ec323c4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.roblox.com.et/games/142823291/Murder-Mystery-2/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.roblox.com.et/games/142823291/Murder-Mystery-2/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8b0bc51f-c87f-5aa3-81da-e9e34c1fb543","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.16878.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.16878.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4291c46f-5029-5833-a432-c60315cb2745","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.roblox.com.pt/games/142823291/Murder-Mystery-2/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.roblox.com.pt/games/142823291/Murder-Mystery-2/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9bcd6fe4-7fa3-5420-a8a0-2cf16d78069e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://increasefollowersforinstagram.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://increasefollowersforinstagram.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ff9abef-e43d-55ab-84d6-d526cb59b5e7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://dinesh12966.github.io/phishing-site/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://dinesh12966.github.io/phishing-site/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9971f207-326a-5681-82ec-4e922ee17754","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://p01--ar24docsecurity--qmjhcscz5dnb.code.run/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://p01--ar24docsecurity--qmjhcscz5dnb.code.run/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--750aa3a8-3397-59a6-a0d9-18d0ea70f4fa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://site--docapost24ar--df8ybdpttf6b.code.run/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://site--docapost24ar--df8ybdpttf6b.code.run/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8838fe2a-6b24-557b-9366-1e6255c76047","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://p01--docapostar24--df8ybdpttf6b.code.run/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://p01--docapostar24--df8ybdpttf6b.code.run/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8955b770-73c0-5f25-927a-c2a03eef259d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rittajj.onthewifi.com/metanet/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rittajj.onthewifi.com/metanet/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd300629-a2c5-50ff-ba45-34aa512324b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://asvxzxzwscs.eu.cc/mx","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://asvxzxzwscs.eu.cc/mx']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--070f9498-6a8f-5bcd-b0be-089356a4274f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://asvxzxzwsvg.eu.cc/es","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://asvxzxzwsvg.eu.cc/es']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fe0a296-a91d-51a9-8624-b619a191ab2d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://panhalkarpratiksha7-jpg.github.io/Amazon_clone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://panhalkarpratiksha7-jpg.github.io/Amazon_clone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c7679e6d-3d13-5291-b9fc-57ec61f20e07","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://puyaaaaa.github.io/roblox-rg/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://puyaaaaa.github.io/roblox-rg/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--46dd9872-a0f0-5fe0-b5ca-30f42ecc1087","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://roblox-lo.github.io/roblox-log/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://roblox-lo.github.io/roblox-log/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d486ab6c-1720-5df7-a3b4-c4df0a13a902","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://appeid.rcloud.me.farmbase.co.tz/DUVzTTavlOw/?redirection=login","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://appeid.rcloud.me.farmbase.co.tz/DUVzTTavlOw/?redirection=login']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--076c051c-e217-5478-887d-adb7f0cfe3a1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://appeid.rcloud.me.farmbase.co.tz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://appeid.rcloud.me.farmbase.co.tz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--347955c7-a386-5e09-87d0-69a8a94a1d9c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://codehub-amber.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://codehub-amber.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ef943ff-e434-5a04-a8c6-510bdb098529","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://grandhoreb.com/adobe-secure/installer/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://grandhoreb.com/adobe-secure/installer/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f9a3055-b327-51fa-859c-554cd113ab42","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://misscroma.site/ar24/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://misscroma.site/ar24/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1d0fd5c-e2e2-5aba-acd6-2a30c3311d3d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.facebook-verification-system3.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.facebook-verification-system3.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad587ea5-8724-5fd7-b987-aa7a466a07ac","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://thisfreeinstagramfollowers.blogspot.com/?m=1","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://thisfreeinstagramfollowers.blogspot.com/?m=1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7eabaf61-f310-52fb-9af5-b4d644762778","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://121jio.senes.at/stakings/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6MTY0NDtzOjQ6Im5vcGQiO3M6MTM6InJzcy5zYXlsZXIuYXQiO3M6MToibyI7aToxMTM2O30=","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://121jio.senes.at/stakings/?b=YTo0OntzOjU6ImxhYmVsIjtzOjA6IiI7czozOiJ1c3IiO2k6MTY0NDtzOjQ6Im5vcGQiO3M6MTM6InJzcy5zYXlsZXIuYXQiO3M6MToibyI7aToxMTM2O30=']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1765f43c-78d5-5a7b-bbfe-14c8d8a2a2b6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebookloginss.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebookloginss.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2a3137ac-cb44-5da7-ad01-0822b9ba6613","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://facebooklogincc.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://facebooklogincc.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a82aab4e-ab63-5e3d-90ee-4b9386b364bd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://duishalik.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://duishalik.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0ece3da1-57fe-598e-8c94-979720041111","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebooklivepage.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebooklivepage.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0be167b3-6cae-521c-88d7-3d93756cc99d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebooklivepage.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebooklivepage.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21e07c31-d63a-50f4-a73d-fb4e05788801","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://site-jn6w55wca.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://site-jn6w55wca.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e8660316-f0c9-5344-8047-cfa4c5a4d280","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://site-ah3d6z3ed.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://site-ah3d6z3ed.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e28b6d0b-cfb6-5625-8289-c459cd473e12","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://site-mjemyma8d.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://site-mjemyma8d.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--88ae39b9-bf5f-521a-bf71-aa1aedbc8458","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bright-rectangle-577387.framer.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bright-rectangle-577387.framer.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbb2ce66-c1e8-50c6-b807-8ebe79ba7d7a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://site-vjgfidl3x.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://site-vjgfidl3x.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--21c884d6-e497-5c1d-a2d8-7b69f23f209b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://site-ibvl0r5pu.godaddysites.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://site-ibvl0r5pu.godaddysites.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1502640b-66b4-5170-93e0-e65804063ae9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://access-lieledgr-eng.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://access-lieledgr-eng.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96e181db-6432-5544-b2e7-65172372bda4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://ycgfn61lkwg-vnzktpli-4ce79c-ycg22c.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://ycgfn61lkwg-vnzktpli-4ce79c-ycg22c.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e659f920-4437-514b-9ace-a759ba483c0f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ledgre-live-en.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ledgre-live-en.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c16e79a-ec00-5444-aa80-3dc79f13dea6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.comcastinc.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.comcastinc.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e718f226-2c78-5a4d-a86f-0d7df11d1ad2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://msprq82nhwu-ycgfnfyn-0d3e1f-vn855a.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://msprq82nhwu-ycgfnfyn-0d3e1f-vn855a.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fc03b177-ce80-59f6-8912-971f3d9e4eeb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/users/457336501877/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/users/457336501877/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9fbd3340-6fa8-5667-8a6c-9f03f28b1eff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://u648984.softaculous.dev/wp382/wp-content/index.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://u648984.softaculous.dev/wp382/wp-content/index.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1620ad17-c965-5b3f-aa30-2d0efefaae3b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://qrsu.io/83FMW","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://qrsu.io/83FMW']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2cb5e4b7-6cfa-5bf6-998b-39e15212ebb9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://powercleantank.com.au/secure/sorce/wmailt.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://powercleantank.com.au/secure/sorce/wmailt.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5ea49c9a-7a6f-58fd-8536-48b4aae0a791","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://allegrolokalnie.pl-013337.icu/oferta/skuter-wodny-nie-uzywany-3-lata/58304","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://allegrolokalnie.pl-013337.icu/oferta/skuter-wodny-nie-uzywany-3-lata/58304']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--026153e7-5ce1-50e8-9fbd-9598a41da759","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.z-bio.link/i92alq/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.z-bio.link/i92alq/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8a388a89-a09d-5839-8f80-098f77031f4d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://cancelcardiffbahora.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://cancelcardiffbahora.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6d73342f-c9cc-5b2d-813a-b828fe45ea7a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.busanopen.org/office/msgvoice/source/Login.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.busanopen.org/office/msgvoice/source/Login.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3d1ce5d8-f9f4-5b49-b13c-29b929de020f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.busanopen.org/office/msgvoice/source/wrongpass.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.busanopen.org/office/msgvoice/source/wrongpass.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9b7470e3-4b67-5043-9118-d2695b20ad6b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.ahhhh.pe.kr/zb41/data/1057168297/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.ahhhh.pe.kr/zb41/data/1057168297/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--933a9b38-718f-5984-95c2-fa0e96adc8bc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.17564.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.17564.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--35f35b67-7b81-564c-b8f5-676317682a92","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://homeledger.zapier.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://homeledger.zapier.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dcb94af-9acd-5960-9bb0-4648abc3695d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sitio6.apps.viupay.live/sign_on.php?error=","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sitio6.apps.viupay.live/sign_on.php?error=']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0c9ddc96-f20b-58ce-81c0-48c5f1e096a7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sitio6.apps.viupay.live/login.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sitio6.apps.viupay.live/login.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bcc1b273-94b9-59cd-809e-6c35d7de8dce","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://njj.standard.us-east-1.oortstorages.com/docusign.doc?EMAIL=salex7@39b4c67e055d587064c1010f577bff8257a6.org","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://njj.standard.us-east-1.oortstorages.com/docusign.doc?EMAIL=salex7@39b4c67e055d587064c1010f577bff8257a6.org']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0eaf6183-c5d0-5cc2-a376-7c2949690eba","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://facebooksignuplogin.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://facebooksignuplogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51deefdc-6cbe-512f-a89a-2ce9d2e6a89e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facebooksignuplogin.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facebooksignuplogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--94c06d4f-ed37-5335-b4f3-742e4e3dadad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ghein4.systeme.io/spectrum","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ghein4.systeme.io/spectrum']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--84e8e29f-02c1-5b4a-84ac-a635a88bf6b8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://vvrl.cc/a330k8","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://vvrl.cc/a330k8']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--33184bfe-856d-5650-a73e-30872fa6daae","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://personal-finance-egy.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://personal-finance-egy.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ba835225-c0ce-5677-8342-cdec7c4aa3f8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://trzer-suite-info.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://trzer-suite-info.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b1404336-ad5a-541e-b184-2092ce68d867","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.pt/games/79402242188809/Baddie-Tag?privateServerLinkCode=99382535900423182128231632453729","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.pt/games/79402242188809/Baddie-Tag?privateServerLinkCode=99382535900423182128231632453729']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--58c2ad5f-b322-5ac0-bd11-7b165dd25c5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebooklogin123.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebooklogin123.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6187a010-b86d-59f7-99dc-58f565868f29","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://j-tomlinson.com/5abdcr/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://j-tomlinson.com/5abdcr/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6285a1a7-184e-5e7c-a7d3-ca696a11332c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.metamaskwallett.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.metamaskwallett.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--40f7f2d4-3a2a-5079-a84d-8cd444d2d471","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://simple-home-591117.framer.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://simple-home-591117.framer.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--173da8c0-1ba2-5ead-be39-a150f7122334","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfinvoice.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfinvoice.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--630c7040-9a65-5196-aaf5-15478e82aafa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://comcasstweb.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://comcasstweb.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2dec4410-bbfc-5cf3-a52b-9d3db4dd6c76","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfintiylogin.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfintiylogin.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b14423-e30f-5ae5-b417-45e193a8b925","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://steamcommumminty.cam/tradeoffer/new/partner=Jp193Mk850Tc2746tokenQsNP635vR7280","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://steamcommumminty.cam/tradeoffer/new/partner=Jp193Mk850Tc2746tokenQsNP635vR7280']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--956e5ed5-bd84-5abe-aa48-d603690afd70","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.instagram-login-ig.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.instagram-login-ig.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--788dfb3b-73d0-5e01-821c-147d609248dc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.15370.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.15370.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--30c24be9-5577-57b6-be1f-3fb50bbd82c9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://generous-acknowledgment-515790.framer.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://generous-acknowledgment-515790.framer.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8c7a6e50-cffe-5003-a2a9-53fb73fd927d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rss.sayler.at/go/y2c4w274/3374?label=graph_61","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rss.sayler.at/go/y2c4w274/3374?label=graph_61']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d5f06280-fc60-5ce7-bb22-2db0fd551c05","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ledger-wallets-auth-edges.vercel.app/ledger%20form/verify.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ledger-wallets-auth-edges.vercel.app/ledger%20form/verify.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2201a89-44b9-5dcb-8245-7c3e5cb0bf0c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagramsupportsegurity.github.io/Instagram","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagramsupportsegurity.github.io/Instagram']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dbb1c720-a3da-50c5-897b-b255dc65f0e4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.rroblox.wf/users/1179291790/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.rroblox.wf/users/1179291790/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4b4f4d4-a229-53e6-bd8e-86e0fba45f87","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.g14w.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.g14w.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a58bb3e-b55e-5061-968b-d193e60414dd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://comcastinc.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://comcastinc.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4fbf9527-cca7-5a01-8878-7503f43d5846","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://erfan82erfan.github.io/instagram_login/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://erfan82erfan.github.io/instagram_login/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2b01d783-56e4-52aa-9764-6be7b7b064f1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rapid-oak-629.injaltransferwillgonabaid.workers.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rapid-oak-629.injaltransferwillgonabaid.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--49df92ee-b155-5818-97a2-06407b4ef7a1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://awsforensicl3ns-west1apprunner-dprd03feve9j.edgeone.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://awsforensicl3ns-west1apprunner-dprd03feve9j.edgeone.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a0a73f3-5adc-5f2f-9e7f-1e9af217880a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagramlikescheap.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagramlikescheap.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c574c8a4-b86d-5c0a-bb41-691bb8ba60b1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.instagramlikescheap.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.instagramlikescheap.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--902b7e0d-a243-5f91-990f-3262b783ab45","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.roblox.com.ml/users/468343957093/profile/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.roblox.com.ml/users/468343957093/profile/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f697acee-1911-57cf-b4db-560a1da73902","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.wh-apghm.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.wh-apghm.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--115d51fe-fc06-5e03-b021-4fa3642c24b4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ledger-live-connect-desktop.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ledger-live-connect-desktop.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f6cd889d-5c42-5ae1-99f4-44e898e3faed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://to.lk/bJFori","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://to.lk/bJFori']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2988feb-e53b-55fd-925b-a64950d3dd47","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.ml/users/383212427167/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.ml/users/383212427167/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--df2ccf7f-d635-5a48-a12e-cb66d30ef284","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://zoltar-frenko-d5b740-ggrht-bn2406pke.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://zoltar-frenko-d5b740-ggrht-bn2406pke.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfb3e799-d00c-59ae-80ba-b4db15c58999","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://misilabario.cl/dhl/dhl/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://misilabario.cl/dhl/dhl/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f84765f5-c5f8-5633-acc7-13fb0b929ac0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://ycgfn88lkwg-vnzktplx-4a5d9e-ycg17w.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://ycgfn88lkwg-vnzktplx-4a5d9e-ycg17w.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--29ffad65-4d14-56d2-99ba-aa6be2a6b9c6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sock-zizifn-kr.ludeaphd.workers.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sock-zizifn-kr.ludeaphd.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ad3c40be-7483-5bc3-beac-8f5bbd22b8ed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fathimaminhazain.github.io/clone-landingPage/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fathimaminhazain.github.io/clone-landingPage/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--268be80c-0274-5055-8f8f-3a12054539ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ledger-securedevice.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ledger-securedevice.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac940832-1c65-5008-847a-cd79e796767c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ggforshi-cmyk.github.io/roblox-game/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ggforshi-cmyk.github.io/roblox-game/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7bff210b-e99f-585e-be70-5aba2fba1ab4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rblx-r0bux540xyz.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rblx-r0bux540xyz.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--236fa0fa-d07b-5850-ab8a-630d351b2e0d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.gr/games/14153443454/Meet-a-neko?privateServerLinkCode=76143850591978814844014072723342","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.gr/games/14153443454/Meet-a-neko?privateServerLinkCode=76143850591978814844014072723342']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc2f67b0-ca6d-5e77-8651-193431e7eb53","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.imtoken-biz.org.cn/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.imtoken-biz.org.cn/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9a7630c-9e3c-500b-892f-1d77597c421c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://faq-trzzer-suite.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://faq-trzzer-suite.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0b266360-c5de-5730-80c9-c6f73a7a2e0d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://mobile-xfinity.vercel.app/login","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://mobile-xfinity.vercel.app/login']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b453ef82-0d56-5d45-aa54-c7d5f50046ff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://mobile-xfinity.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://mobile-xfinity.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6182137f-aaa7-5924-8c29-afb49df6776b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://sp13ct-frandel-biz-zormek-lavsel.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://sp13ct-frandel-biz-zormek-lavsel.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d2b8daa8-4d39-5eab-91ea-1dfb81dae0d6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://am.sohll.lol/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://am.sohll.lol/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--045c696c-4004-5938-a9d9-815774f4d0be","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://middleeastfragrances.site.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://middleeastfragrances.site.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ffd8e841-86f8-53e5-8431-752b98619d54","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://middleeastfragrances.online.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://middleeastfragrances.online.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--537adf4b-0cad-5b99-a5c1-6929de4da5e3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://middleeastfragrances.website.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://middleeastfragrances.website.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a9db183-a1f5-5c53-836a-d1fe82ee51e6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://middleeastfragrances.store.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://middleeastfragrances.store.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e94893e3-5142-539e-a5d6-99a36c9fb4d4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://laaroma.online.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://laaroma.online.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bccb85ed-7986-510a-a74a-ef8b223a43f3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://laaroma.store.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://laaroma.store.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d64ec2e5-06bf-5670-a3b4-97ab662ad5ec","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://middleeastfragrances.cyou.middleeastfragrances.shop/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://middleeastfragrances.cyou.middleeastfragrances.shop/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4241d752-aa6a-5c0e-9fc6-eea2f1c223d9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfonlineserver.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfonlineserver.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ee3bb75-035c-5d88-8374-fec9c8598069","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://g5.lu/auaaw","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://g5.lu/auaaw']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f9b2a647-7d90-51d7-a9cf-474c9994873e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sp13ct-frasel-biz-zormor-lavdik.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sp13ct-frasel-biz-zormor-lavdik.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--adc94702-3ed5-5a1e-a564-95586c949a9f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://metamaskwallett.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://metamaskwallett.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5c0eb708-eac3-5aaa-9dd1-70f9e5840222","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://logincomcastt.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://logincomcastt.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c0bc8c9c-d499-58fe-86f8-fd1883516777","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://web-fun-checkout-prototype-uniswap.vercel.app/explore/tokens/ethereum","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://web-fun-checkout-prototype-uniswap.vercel.app/explore/tokens/ethereum']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cbdf06e3-c384-5b07-9675-313d610d7be6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://vip2.jiaozuo31.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://vip2.jiaozuo31.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c124ed4b-d305-57c3-9cdb-d74a238d2b13","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://creditos-pichincha-miles--pichincmiles.replit.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://creditos-pichincha-miles--pichincmiles.replit.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cba17cb8-6dcb-51ea-aae7-1103d95d1e7f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://creditos-pichicha--rondonpokemon0.replit.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://creditos-pichicha--rondonpokemon0.replit.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b8c017a-057b-5e1c-ba3d-2a61d285c3a9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://pichincha--credit004.replit.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://pichincha--credit004.replit.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--62f02766-ba82-581d-947b-cb32ba84232d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.gr/users/622177948453/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.gr/users/622177948453/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6abbb0e1-894a-5cfa-83b9-c504f7557585","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://webdomain03.dnscpanel.com/~aguiasda/it/inbank/auth/login.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://webdomain03.dnscpanel.com/~aguiasda/it/inbank/auth/login.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d1328f2f-c6cf-5b44-8fb6-7fee4b2944aa","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://webdomain03.dnscpanel.com/~aguiasda/it/inbank/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://webdomain03.dnscpanel.com/~aguiasda/it/inbank/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef5f6f02-8dbc-5ec4-b7a1-f17865b2bdf9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://steamcommumminty.cam/tradeoffer/new/partner=64318432token=r0igerPI34832","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://steamcommumminty.cam/tradeoffer/new/partner=64318432token=r0igerPI34832']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fa468300-7ef6-586a-a35f-cf5a2f542b38","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://docusign.kecifang.net/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://docusign.kecifang.net/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d632755a-0af3-50ac-bed4-7cf84d8e60ef","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://3aurbanismo.com.br/wp-content/Sys/ch/card.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://3aurbanismo.com.br/wp-content/Sys/ch/card.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--55874664-214b-5d1d-9699-453726fcb845","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://wwwmaxpointsprogram.us.cc/4g/home.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://wwwmaxpointsprogram.us.cc/4g/home.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18f05014-a0f7-5b0e-9d2b-3b945a568039","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://php-web-server-3--jmhernandez2990.replit.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://php-web-server-3--jmhernandez2990.replit.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--aa724be0-efaa-5803-ae60-37e37b8d9c5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://bhdservisscuentresolu.yzz.me/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://bhdservisscuentresolu.yzz.me/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6c709666-08e3-5f54-951c-cc90aeec061e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://phost.com.br.cssi.com.br/CB/DZ/CB/espace-client/user.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://phost.com.br.cssi.com.br/CB/DZ/CB/espace-client/user.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a448a82e-d6d8-533a-9de5-85676ccce8df","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://phost.com.br.cssi.com.br/CB/DZ/CB/espace-client/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://phost.com.br.cssi.com.br/CB/DZ/CB/espace-client/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2524aff0-f07e-5009-8243-ca2fff1d197e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.71678.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.71678.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5952c0a3-abdd-5fe2-a631-de4914c9fd04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://fakebooklogin.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://fakebooklogin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fd8fe4ee-b169-5e87-a2e8-524f155fc685","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://staging.dfhwvp9zy8m7p.amplifyapp.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://staging.dfhwvp9zy8m7p.amplifyapp.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b3f3cd8-c47a-5315-bf20-ada5e3d645a1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://security-server-page--45678ghj.replit.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://security-server-page--45678ghj.replit.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--476aab33-647e-5a40-90b3-3017a70b6d9d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://rf3x4x34x.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://rf3x4x34x.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--05c6eef9-5cf1-58cd-8af9-29f7b92f7ef2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagramfollowers7894.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagramfollowers7894.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1315f71f-8bb8-57d3-99fc-589566cd7b28","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.instagramfollowers7894.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.instagramfollowers7894.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--009cdb94-aee7-5e5f-a583-689b9e8c0f04","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://34cr34cr3c-8ap.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://34cr34cr3c-8ap.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--741bd34d-96ec-5507-adb6-913d348f4e22","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://roblox.com.bi/users/948999725954/profile","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://roblox.com.bi/users/948999725954/profile']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6de402f2-4e4b-5cd8-8b0c-c117f5743363","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://bafkreidia54cvtcl6pqordwdjcjmkrfmco3kvfyzedmycxhdt7tk3fexau.ipfs.dweb.link/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://bafkreidia54cvtcl6pqordwdjcjmkrfmco3kvfyzedmycxhdt7tk3fexau.ipfs.dweb.link/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c1406be-6794-5c37-b432-3dba26377fdc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://an2210sh.github.io/NETFLIX-CLONE/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://an2210sh.github.io/NETFLIX-CLONE/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8ffa76e9-466a-5cac-a862-809857de9600","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://id.auth-share.su/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://id.auth-share.su/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d9bd06d-ab57-5670-ac31-2ddfd103b8e1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://rajansingh018.github.io/netflix-clone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://rajansingh018.github.io/netflix-clone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--389f4838-1a94-5310-8a4e-d028228a1b3f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://axpgames.github.io/robloxlogin/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://axpgames.github.io/robloxlogin/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ac5cb545-d6d7-5752-bd11-924b20966840","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://gamebonusak-bot.github.io/Google/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://gamebonusak-bot.github.io/Google/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20ad9202-ccf8-50ea-8cdb-811d4b666c5b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://7ashwani7.github.io/Spotify-Clone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://7ashwani7.github.io/Spotify-Clone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2d0d8bb0-2235-516a-b9ae-1c6af5c43e55","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.loginaccountfacebook.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.loginaccountfacebook.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3bdc1820-151a-57ec-9ea4-f854d2576b14","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.infoxfinity.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.infoxfinity.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0fa087fa-65dc-58b2-a718-e5dbe7ae37c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://appleid.auth-share.su/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://appleid.auth-share.su/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e55dc51-8aa2-5a25-a05a-e54969dbb4bf","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://908779.com/admin","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://908779.com/admin']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ade7aa80-44a9-597b-9c96-6b2a05b41435","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://kantox-preprod.com/fr/secure/login","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://kantox-preprod.com/fr/secure/login']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2eedb168-a1a2-5f1b-8cb9-7520425143cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://qomculture.ir/light/post/index.php?email=alynz@ab48e036e00279db6f905229e9f694349666.com","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://qomculture.ir/light/post/index.php?email=alynz@ab48e036e00279db6f905229e9f694349666.com']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9e6367f7-a768-5059-bfc8-e6f46edb83e0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://itsmeasifikbal.github.io/Ledger","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://itsmeasifikbal.github.io/Ledger']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--32920adf-9fa8-5de2-9d88-0baff8148049","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://zowie2l.github.io/Ledger","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://zowie2l.github.io/Ledger']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--20bfeb36-5dd4-5118-90fc-0b494a6babd4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://codingwithdhruv15.github.io/Expense-tracker","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://codingwithdhruv15.github.io/Expense-tracker']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4b08cd31-6485-5917-8336-e598671ea6af","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://lscai-dev.github.io/PL-LEDGER","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://lscai-dev.github.io/PL-LEDGER']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6cb3372d-3fc3-5d53-8bed-c526f991cd34","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.facebook.affixlink.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.facebook.affixlink.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8fcd31d-f659-51be-b9cc-47a67feda18c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://polizcardactiv.bond/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://polizcardactiv.bond/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--daeee83c-f483-51b8-a104-dfba2adda013","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://cancelacardiffseguro360.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://cancelacardiffseguro360.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9baa427b-7c21-5849-b17f-95bbcdace567","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.gr/games/133624249066123/High-School-Life-RP?privateServerLinkCode=26676135374151735703107772519650&game_id=133624249066123&game_name=High-School-Life-RP","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.gr/games/133624249066123/High-School-Life-RP?privateServerLinkCode=26676135374151735703107772519650&game_id=133624249066123&game_name=High-School-Life-RP']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--976d22f2-f318-5ed1-8eae-8ab7b1cc4677","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/games/93002451912476/Caught-Lackin-Duels-In-Development?privateServerLinkCode=62163753765523904476096247126035&game_id=93002451912476&game_name=Caught-Lackin-Duels-In-Development","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/games/93002451912476/Caught-Lackin-Duels-In-Development?privateServerLinkCode=62163753765523904476096247126035&game_id=93002451912476&game_name=Caught-Lackin-Duels-In-Development']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bb591753-0730-558a-b86d-06c8439d8c6a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/games/104715542330896/BlockSpin?privateServerLinkCode=62163753765523904476096247126035&game_id=104715542330896&game_name=BlockSpin","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/games/104715542330896/BlockSpin?privateServerLinkCode=62163753765523904476096247126035&game_id=104715542330896&game_name=BlockSpin']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7fada6e2-cea9-5c23-95f0-1f524d834d3e","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bi/games/85896571713843/COMP-Bubble-Gum-Simulator-INFINITY?privateServerLinkCode=90736236509261092576081988506405","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bi/games/85896571713843/COMP-Bubble-Gum-Simulator-INFINITY?privateServerLinkCode=90736236509261092576081988506405']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cfae948b-7f4b-5a06-ad8a-ea26b1c9f81a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://g5.lu/fhcmb","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://g5.lu/fhcmb']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61ca3f40-d549-5288-8e92-56b65aca04a4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.gr/games/103037106396302/TROLL-Hug-Tower?privateServerLinkCode=26676135374151735703107772519650&game_id=103037106396302&game_name=TROLL-Hug-Tower","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.gr/games/103037106396302/TROLL-Hug-Tower?privateServerLinkCode=26676135374151735703107772519650&game_id=103037106396302&game_name=TROLL-Hug-Tower']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--01ba6e4e-73fb-5606-9e19-24f786ca57c3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://menuue-aktivasipays.greata.beauty/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://menuue-aktivasipays.greata.beauty/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e9ef3155-ab9b-5523-9281-ad9f1fa10f07","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://willesaxz.pages.dev/public","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://willesaxz.pages.dev/public']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1dd95208-1bce-5fd7-8e5b-a33ae6410aab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.wesmongtx.4663.org/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.wesmongtx.4663.org/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fbb6897e-31b5-5370-a2e8-3d86d716e6c1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://c0nectt.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://c0nectt.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b91a59ff-8bfa-5aac-85d2-1e0d3d726ad7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.35518236365.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.35518236365.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7a9725af-9960-53b1-8ece-9cbcf1ff1f4f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://xfiniity-update.weeblysite.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://xfiniity-update.weeblysite.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b7a966ab-a2ba-580b-ab72-b24b0a94b14a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://dnxa-x.iddev.biz.id/vuxe/x4/login.php","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://dnxa-x.iddev.biz.id/vuxe/x4/login.php']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4389bce-d93b-55a3-872c-1c3978458d8d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://csplaygems.com/2r17w9bw","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://csplaygems.com/2r17w9bw']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--24ef716d-f9c6-5603-bb37-e6823dc1a626","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://sp13ct-lormel-biz-pradik-zavkor.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://sp13ct-lormel-biz-pradik-zavkor.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--d3a557f6-2507-5aad-934c-506e335b6a46","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagramaaps-code.github.io/insta-6/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagramaaps-code.github.io/insta-6/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c56ec97f-3206-505d-a9f7-27322ae16048","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://r911.site/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://r911.site/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e086632d-12fd-5dca-8af5-042bbf6579ad","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://robux911.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://robux911.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--51da4752-de23-5961-b31d-723cbdf8b8c6","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://goo.su/NnQB","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://goo.su/NnQB']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9d0ccd62-b72e-5873-a640-026e63acfe7b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://prufungkontozu.click/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://prufungkontozu.click/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e6231087-c922-5b6b-93e1-386b399edbed","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://worker-curly-sun-aghamohammadhossein.mhkh831221.workers.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://worker-curly-sun-aghamohammadhossein.mhkh831221.workers.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8d791601-3c1c-51e4-a0e4-4f784abb296d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://amycanterbury.com/PROPERTY","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://amycanterbury.com/PROPERTY']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc16acd2-3d4f-52aa-a8dd-ccbe42a35da3","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://f005.backblazeb2.com/file/ijfjefgei/SignintoXfinity.html","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://f005.backblazeb2.com/file/ijfjefgei/SignintoXfinity.html']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--10364d81-abc6-5f61-a91c-20d9f99d86ea","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.tweakzen.com/app/delta-executor/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.tweakzen.com/app/delta-executor/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--cb0a8d69-24bc-51fc-b34e-afa1274af2f4","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagram-login-ig.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagram-login-ig.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--91514531-3912-5f21-b232-be80b0168591","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ycgfn00lkwg-vnzktplx-4a7d0e-ycg66w.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ycgfn00lkwg-vnzktplx-4a7d0e-ycg66w.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a7c3c28c-edc8-5164-a609-b42d0208a5f8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://gentle-paprenjak-7fc631.netlify.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://gentle-paprenjak-7fc631.netlify.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b47a66a-beeb-5e5b-a4a5-cb90568ff26f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.roblox.com.bn/games/14153443454/Meet-a-neko?privateServerLinkCode=05478284708093709924530844404081","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.roblox.com.bn/games/14153443454/Meet-a-neko?privateServerLinkCode=05478284708093709924530844404081']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--389e2633-df75-5261-83ce-d748f7626961","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://zdkpt80gpx-wjsng28kxz-3e2f5b-wjq91k.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://zdkpt80gpx-wjsng28kxz-3e2f5b-wjq91k.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--42a5857e-b510-57e6-932f-df4896417e8c","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://shopee769.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://shopee769.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ef2499a0-8d42-56bf-92c6-e02396e8f043","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.shopee769.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.shopee769.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--ca61162f-37ee-5984-a1a2-125c67c1d77d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://cn.mpmxzu.com/home/register?code=20188","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://cn.mpmxzu.com/home/register?code=20188']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8582fdcd-883d-5780-9fc5-1c848786d562","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.ww38.hostmaster.m.facobok.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.ww38.hostmaster.m.facobok.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--23407ab3-d350-5c50-ae47-a37698bca945","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://vicho2014pro29328-sudo.github.io/Datos-billi-butcher-bot-rbx","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://vicho2014pro29328-sudo.github.io/Datos-billi-butcher-bot-rbx']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b607c379-c4dc-5128-a576-4cc73c9e7c5f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.17548.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.17548.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ecd2003-42fb-5d7b-b0cc-be3d8fb8b4c5","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://accesoihabilitado.iceiy.com/?i=1","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://accesoihabilitado.iceiy.com/?i=1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4ef712ed-ced5-579d-a45e-4b4cd8d05398","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.acur.me/l/ZkLgp","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.acur.me/l/ZkLgp']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--727949d6-d3eb-5f76-8847-3791ba7997bc","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://comcastt1eyr.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://comcastt1eyr.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b3defe67-111a-594a-b4db-626e5dbe3aee","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://micr0sft.github.io/com.mx","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://micr0sft.github.io/com.mx']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9a746f16-fb41-5ad7-92cc-1420f419140b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.15375.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.15375.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4d7db7e5-a396-5a87-8323-88ad7a144e09","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://x39p.top/m/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://x39p.top/m/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e468b40a-2bcf-549b-a927-79b380051df7","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://whatsapp.traviyo.in/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://whatsapp.traviyo.in/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dc48e9f5-4bc6-5090-9e51-6194d7d68697","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebook.affixlink.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebook.affixlink.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f2d4fc59-9138-5c7f-8c34-ede97d519c50","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://telvora-nqx-zentora-a5x6hk34.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://telvora-nqx-zentora-a5x6hk34.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--5f123813-7ab2-56f2-984b-ef20aa424a39","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagram002.github.io/Instagrem","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagram002.github.io/Instagrem']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e0e2c4ec-f132-5dc3-b548-6feebe7e82cb","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://netflix-clone-opal-iota.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://netflix-clone-opal-iota.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--18a3d23a-1644-5910-927b-573058b873c8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.paypal-signin.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.paypal-signin.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6ecb6033-4918-5e97-ac95-8df85adf2049","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.facbookloging.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.facbookloging.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--594311ce-f782-582d-b4a6-b558d7603926","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://sarthak83006.github.io/Netflix-frontpage/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://sarthak83006.github.io/Netflix-frontpage/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--faad45fd-529e-5503-a11f-5b3a0b782fff","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://ui-clone-faraz.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://ui-clone-faraz.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e4696c54-7c30-5630-9651-fa468db983ab","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://goo.su/aNlArMJ","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://goo.su/aNlArMJ']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--fea80b05-fbdb-5af7-ad65-98056e405147","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://netflix-ui-clone-two.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://netflix-ui-clone-two.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e1f74df1-8e22-5eeb-ad0a-00195bd964d8","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://damnchangeventq8.shop.page.midasbuy-zone.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://damnchangeventq8.shop.page.midasbuy-zone.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--3b65b79f-e8e0-529c-9cc2-ea5d01abe1c2","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://suryanshsharma31.github.io/Amazon-Clone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://suryanshsharma31.github.io/Amazon-Clone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--373d4891-9942-5e4d-a991-6ff9fbe0c4d0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://nayansharma8123-gif.github.io/AmazonClone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://nayansharma8123-gif.github.io/AmazonClone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--65e1fac1-7969-59e4-b208-4b98f57d930a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://posttelecommail.github.io/post.github.io/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://posttelecommail.github.io/post.github.io/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a29b0d35-d9e9-5291-9f3c-f0788a4a3665","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://kaleabsintayehu489-dotcom.github.io/Netflix-clone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://kaleabsintayehu489-dotcom.github.io/Netflix-clone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f855b381-1b4f-5f04-bb66-1e24b9ed0db1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://instagramfollowersfake.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://instagramfollowersfake.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a4b533b6-6e69-5ada-bb86-accb74b868c0","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://nayansharma8123-gif.github.io/Netflix-Clone/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://nayansharma8123-gif.github.io/Netflix-Clone/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6a92e2e9-2fcf-5364-b44d-6889f4618b11","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebook-2-0-dun.vercel.app/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebook-2-0-dun.vercel.app/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8b796a9-3c37-5c5a-a5c0-7c4ca5a5f99f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://faceboomlogin.blogspot.com/?m=1","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://faceboomlogin.blogspot.com/?m=1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--50670ec3-8311-5a77-bafc-7a36e5553d52","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://giftcodelqvnlq.aovlienquan-garena.com/2554f36e14492ddbabcef9d0a46ec792FB","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://giftcodelqvnlq.aovlienquan-garena.com/2554f36e14492ddbabcef9d0a46ec792FB']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--152bee1c-134b-5785-9bc3-4e0eb01993cd","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://whatsapp.audios-whatapp.hl.cn/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://whatsapp.audios-whatapp.hl.cn/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--14713c9e-1b2d-5461-9e4c-11b1b96959b1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://page--trezrr-io-logg.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://page--trezrr-io-logg.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--b12810cf-4c6b-5299-920a-bacb64ce4f1a","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://facebook-fansdanssapage.blogspot.com/?m=1","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://facebook-fansdanssapage.blogspot.com/?m=1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--9ec11f19-207b-52ee-ad89-446662c4dc07","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.facebook-fansdanssapage.blogspot.com/?m=1","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.facebook-fansdanssapage.blogspot.com/?m=1']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0d1967b1-9394-5f5a-ad1a-861565ef585b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://uj2-tocl-wyls-ykjh-9pon-os0dhc.pages.dev/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://uj2-tocl-wyls-ykjh-9pon-os0dhc.pages.dev/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--f496b67b-c8c4-5bc7-b42f-0ff574fdba96","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://1336ooo4.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://1336ooo4.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--dade7eec-3d3d-5fb8-b6b2-46793c1ad07f","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://xfinity-connect-newupdate.weebly.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://xfinity-connect-newupdate.weebly.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--eb119ef7-a82b-5bab-b94a-63a6146327d1","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://www.cybersecuritynews.com/new-wi-fi-authentication-bypass-flaw/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://www.cybersecuritynews.com/new-wi-fi-authentication-bypass-flaw/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c00e90cb-d553-5fea-8594-52c887b09c5d","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://whatsapp.nurgulotomotiv.com.tr/login","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://whatsapp.nurgulotomotiv.com.tr/login']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1880f164-b0f2-5d81-9d7d-ac7cd308a8f9","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: http://whatsapp.nurgulotomotiv.com.tr/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'http://whatsapp.nurgulotomotiv.com.tr/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--53174dcc-4f19-526e-9bf8-e70d74cae56b","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://71693.xyz/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://71693.xyz/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--397c8fa2-d316-5ced-991c-312e1a091efe","created":"2026-08-10T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"phishing: https://www.loginmyfacebook.blogspot.com/","description":"Aggregated from open source feeds. Score 34/100, 1 sighting(s), confidence decays with half-life 3d.","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://www.loginmyfacebook.blogspot.com/']","pattern_type":"stix","valid_from":"2026-08-10T00:00:00Z","confidence":34,"labels":["darkwick:provenance=feed","darkwick:category=phishing","darkwick:family=phishing","phishing"],"external_references":[{"source_name":"OpenPhish","url":"https://openphish.com/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--069d47c3-35a4-5a24-b58b-d5767da093ba","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: 104.64.221.161","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[ipv4-addr:value = '104.64.221.161']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--0f48fba3-3d0a-54b3-a42a-c2e37990aff4","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: api.ipify.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'api.ipify.org']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7aa365d6-cdcd-5f57-81fc-d1bff3da44a7","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: discord.com","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'discord.com']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--61c71e7f-b05d-5848-b7e3-25c5ff056ae1","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: golang.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'golang.org']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--71b96f70-e173-50b7-8d8b-c931ad2a5df4","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: inet-ip.info","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'inet-ip.info']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--c8ed1bdc-9693-5a1f-887f-62d4098b8e8f","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: ip.seeip.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'ip.seeip.org']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--e29c5c10-3656-5468-bda2-87dceb0ff20e","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: ipgrab.io","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'ipgrab.io']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4939ffd7-b429-59d4-a1dc-bbe4591c4171","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: ipinfo.io","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'ipinfo.io']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--125a6f7a-96bc-5088-b7a7-85f5ae2abeba","created":"2026-08-09T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: local.onion","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 64/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'local.onion']","pattern_type":"stix","valid_from":"2026-08-09T00:00:00Z","confidence":64,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--845df778-7ff8-5c7b-9c15-f26d2caeb674","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: 165.22.69.214","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[ipv4-addr:value = '165.22.69.214']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--bc7706bd-f690-5186-9a16-2991849c47d3","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: 185.158.107.249","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[ipv4-addr:value = '185.158.107.249']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--a9e05209-05e0-5602-a425-74069d41def2","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: ashburn.va.us.undernet.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'ashburn.va.us.undernet.org']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--7250107a-63d8-544d-be2c-bf661ae1acba","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: bucharest.ro.eu.undernet.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'bucharest.ro.eu.undernet.org']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--1ce0b6a2-d42a-59e2-8939-41e2aaa5fcbe","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: budapest.hu.eu.undernet.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'budapest.hu.eu.undernet.org']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--6b1196fb-cfc9-545b-838d-d8687400e6bc","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: chicago.il.us.undernet.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'chicago.il.us.undernet.org']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--4e98fcc1-f7f2-57d6-8da2-fd05ed4afeb8","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: ix1.undernet.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'ix1.undernet.org']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8be0a116-9f0a-575d-806a-dbf8d6365a08","created":"2026-08-08T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: ix2.undernet.org","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 62/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'ix2.undernet.org']","pattern_type":"stix","valid_from":"2026-08-08T00:00:00Z","confidence":62,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--82fa714d-8d47-5ddc-bb42-02b4e1aa035b","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: 2.26.136.128","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 60/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[ipv4-addr:value = '2.26.136.128']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":60,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--92f37b4a-087b-52b0-aad4-29d60d4c0329","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: upx.sf.net","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 60/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'upx.sf.net']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":60,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--8734f4b1-d70e-594e-bab6-2b084be161a1","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: z.io","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 60/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'z.io']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":60,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--96c4553c-35d9-5d31-9bdc-d69d84ede6e7","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: 2y.cf","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 60/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = '2y.cf']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":60,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--08f89c10-d59c-54e8-9a2b-bc24b01141ad","created":"2026-08-07T00:00:00Z","modified":"2026-08-11T00:01:07Z","created_by_ref":"identity--e85a9f75-1e99-544d-9e07-bb8a22fd1a7e","name":"c2-infrastructure: n.to","description":"Inferred from evidence witnessed by a DarkWick sensor. Score 60/100, 1 sighting(s), confidence decays with half-life 21d.","indicator_types":["malicious-activity","attribution"],"pattern":"[domain-name:value = 'n.to']","pattern_type":"stix","valid_from":"2026-08-07T00:00:00Z","confidence":60,"labels":["darkwick:provenance=inferred","darkwick:category=c2-infrastructure","darkwick:family=discovered_c2","discovered_c2","from_sample"],"external_references":[{"source_name":"DarkWick sample analysis (do-nyc1)","url":"https://darkwick.netlify.app/"}]}]}