Skip to content

Instantly share code, notes, and snippets.

@superducktoes
Created May 19, 2022 20:17
Show Gist options
  • Save superducktoes/f4a2f99fb709c14e8dc7d258f375401c to your computer and use it in GitHub Desktop.
Save superducktoes/f4a2f99fb709c14e8dc7d258f375401c to your computer and use it in GitHub Desktop.
{
"type": "bundle",
"id": "bundle--156aade4-a0b9-4931-aef7-f400b2ffd1d7",
"objects": [
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--7f7cfee6-7cb4-4d8f-8012-bc5959a53564",
"created": "2022-05-19T20:10:17.632149Z",
"modified": "2022-05-19T20:10:17.632149Z",
"name": "31.6.11.98",
"pattern": "[ipv4-addr:value='31.6.11.98']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.632149Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-18",
"x_lastseen": "2022-05-19",
"x_tags": [
"Carries HTTP Referer",
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"F5 BIG-IP TMUI RCE Vuln Check",
"Follows HTTP Redirects",
"Stores HTTP Cookies",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": true
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--07a72430-9857-44cc-a8f1-0f78fc632ac8",
"created": "2022-05-19T20:10:17.64379Z",
"modified": "2022-05-19T20:10:17.64379Z",
"name": "80.95.214.242",
"pattern": "[ipv4-addr:value='80.95.214.242']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.64379Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-14",
"x_lastseen": "2022-05-19",
"x_tags": [
"F5 BIG-IP Crawler",
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Ping Scanner",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--96d43c3e-338d-45c8-8542-6d55f0baa918",
"created": "2022-05-19T20:10:17.645186Z",
"modified": "2022-05-19T20:10:17.645186Z",
"name": "128.90.59.158",
"pattern": "[ipv4-addr:value='128.90.59.158']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.645186Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-14",
"x_lastseen": "2022-05-18",
"x_tags": [
"Carries HTTP Referer",
"F5 BIG-IP Crawler",
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"F5 BIG-IP TMUI RCE Vuln Check",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": true
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--58661a6b-066a-41cd-9e59-99c56454d758",
"created": "2022-05-19T20:10:17.64616Z",
"modified": "2022-05-19T20:10:17.64616Z",
"name": "202.184.106.159",
"pattern": "[ipv4-addr:value='202.184.106.159']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.64616Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-18",
"x_lastseen": "2022-05-18",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8f685045-c995-42a7-843f-1250ed7c2d50",
"created": "2022-05-19T20:10:17.647118Z",
"modified": "2022-05-19T20:10:17.647118Z",
"name": "156.146.60.74",
"pattern": "[ipv4-addr:value='156.146.60.74']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.647118Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-18",
"x_lastseen": "2022-05-18",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": true
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--fb560f14-85ad-4633-b668-bcf576665c2c",
"created": "2022-05-19T20:10:17.648048Z",
"modified": "2022-05-19T20:10:17.648048Z",
"name": "213.252.245.187",
"pattern": "[ipv4-addr:value='213.252.245.187']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.648048Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-17",
"x_lastseen": "2022-05-17",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--fda673f3-1bcb-4aca-9914-9188de75f842",
"created": "2022-05-19T20:10:17.648968Z",
"modified": "2022-05-19T20:10:17.648968Z",
"name": "222.216.195.223",
"pattern": "[ipv4-addr:value='222.216.195.223']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.648968Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--6ce4507b-ee96-4bfb-bf88-b79bb12bf9c2",
"created": "2022-05-19T20:10:17.650758Z",
"modified": "2022-05-19T20:10:17.650758Z",
"name": "82.121.174.53",
"pattern": "[ipv4-addr:value='82.121.174.53']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.650758Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8bbe6fe8-0b1e-417e-9a11-82ac992e100b",
"created": "2022-05-19T20:10:17.65151Z",
"modified": "2022-05-19T20:10:17.65151Z",
"name": "173.230.72.8",
"pattern": "[ipv4-addr:value='173.230.72.8']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.65151Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--c6bbac5c-0515-4542-91c4-30a5286db37c",
"created": "2022-05-19T20:10:17.652238Z",
"modified": "2022-05-19T20:10:17.652238Z",
"name": "175.43.35.31",
"pattern": "[ipv4-addr:value='175.43.35.31']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.652238Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"Carries HTTP Referer",
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--903bc28a-093e-4334-8c25-60446d9211a0",
"created": "2022-05-19T20:10:17.652981Z",
"modified": "2022-05-19T20:10:17.652981Z",
"name": "172.105.194.253",
"pattern": "[ipv4-addr:value='172.105.194.253']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.652981Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--8538a790-17d6-4f79-aa17-ef9210358928",
"created": "2022-05-19T20:10:17.653703Z",
"modified": "2022-05-19T20:10:17.653703Z",
"name": "182.204.177.76",
"pattern": "[ipv4-addr:value='182.204.177.76']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.653703Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"Carries HTTP Referer",
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--56967781-441e-4068-8aed-cdfedc15f0a2",
"created": "2022-05-19T20:10:17.654427Z",
"modified": "2022-05-19T20:10:17.654427Z",
"name": "90.102.32.50",
"pattern": "[ipv4-addr:value='90.102.32.50']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.654427Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-16",
"x_lastseen": "2022-05-16",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--b9b2bf9a-aa39-4d8a-bbd7-c794e2f18ee6",
"created": "2022-05-19T20:10:17.655271Z",
"modified": "2022-05-19T20:10:17.655271Z",
"name": "223.226.135.242",
"pattern": "[ipv4-addr:value='223.226.135.242']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.655271Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-15",
"x_lastseen": "2022-05-15",
"x_tags": [
"Carries HTTP Referer",
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"Stores HTTP Cookies",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--c1a517ae-0eed-4128-9b95-855b4ee25593",
"created": "2022-05-19T20:10:17.656007Z",
"modified": "2022-05-19T20:10:17.656007Z",
"name": "139.177.202.106",
"pattern": "[ipv4-addr:value='139.177.202.106']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.656007Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-13",
"x_lastseen": "2022-05-14",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--fc143c93-352e-4779-8cdb-f7c01f604b4a",
"created": "2022-05-19T20:10:17.656725Z",
"modified": "2022-05-19T20:10:17.656725Z",
"name": "45.63.127.43",
"pattern": "[ipv4-addr:value='45.63.127.43']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.656725Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-14",
"x_lastseen": "2022-05-14",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--c57cfa49-4726-4e78-98ce-8fff378393cb",
"created": "2022-05-19T20:10:17.65754Z",
"modified": "2022-05-19T20:10:17.65754Z",
"name": "141.164.40.252",
"pattern": "[ipv4-addr:value='141.164.40.252']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.65754Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-13",
"x_lastseen": "2022-05-13",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": true
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--d63f9284-080e-42a3-8ac0-6a158f43b617",
"created": "2022-05-19T20:10:17.658368Z",
"modified": "2022-05-19T20:10:17.658368Z",
"name": "81.210.118.10",
"pattern": "[ipv4-addr:value='81.210.118.10']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.658368Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--fafb7a66-44cc-4f13-9f70-0adc5d0beee5",
"created": "2022-05-19T20:10:17.659006Z",
"modified": "2022-05-19T20:10:17.659006Z",
"name": "179.191.81.10",
"pattern": "[ipv4-addr:value='179.191.81.10']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.659006Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--976c683f-4e69-4eb4-a858-b97ee7d1409f",
"created": "2022-05-19T20:10:17.659636Z",
"modified": "2022-05-19T20:10:17.659636Z",
"name": "200.13.137.32",
"pattern": "[ipv4-addr:value='200.13.137.32']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.659636Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--2fa950f7-505b-4376-aff6-9768ff093a02",
"created": "2022-05-19T20:10:17.660263Z",
"modified": "2022-05-19T20:10:17.660263Z",
"name": "81.82.223.106",
"pattern": "[ipv4-addr:value='81.82.223.106']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.660263Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--83a552be-17d7-4cc5-be22-c86d37a7d1f3",
"created": "2022-05-19T20:10:17.660891Z",
"modified": "2022-05-19T20:10:17.660891Z",
"name": "173.172.135.191",
"pattern": "[ipv4-addr:value='173.172.135.191']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.660891Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--724cc2c0-1dbc-4fbd-9cbe-dc2bd0195e15",
"created": "2022-05-19T20:10:17.66154Z",
"modified": "2022-05-19T20:10:17.66154Z",
"name": "203.125.233.66",
"pattern": "[ipv4-addr:value='203.125.233.66']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.66154Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--6ee74070-64be-4a84-bf43-926ab45741f2",
"created": "2022-05-19T20:10:17.662179Z",
"modified": "2022-05-19T20:10:17.662179Z",
"name": "86.41.158.34",
"pattern": "[ipv4-addr:value='86.41.158.34']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.662179Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--6559c4ae-8617-4e7d-99d0-ecfa51483b7c",
"created": "2022-05-19T20:10:17.662802Z",
"modified": "2022-05-19T20:10:17.662802Z",
"name": "188.65.47.103",
"pattern": "[ipv4-addr:value='188.65.47.103']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.662802Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--3ae5a717-a437-4062-b383-ae01e8b3d3ba",
"created": "2022-05-19T20:10:17.663427Z",
"modified": "2022-05-19T20:10:17.663427Z",
"name": "199.127.202.206",
"pattern": "[ipv4-addr:value='199.127.202.206']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.663427Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--7d088444-99f4-4468-8554-69cff4c0a0d1",
"created": "2022-05-19T20:10:17.664057Z",
"modified": "2022-05-19T20:10:17.664057Z",
"name": "5.2.161.92",
"pattern": "[ipv4-addr:value='5.2.161.92']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.664057Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--5627e7c5-c125-4ca3-b2d6-7dc1cd165524",
"created": "2022-05-19T20:10:17.664865Z",
"modified": "2022-05-19T20:10:17.664865Z",
"name": "71.180.42.18",
"pattern": "[ipv4-addr:value='71.180.42.18']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.664865Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--920489e6-12cd-455b-bccb-60b8606ac229",
"created": "2022-05-19T20:10:17.665566Z",
"modified": "2022-05-19T20:10:17.665566Z",
"name": "68.232.62.65",
"pattern": "[ipv4-addr:value='68.232.62.65']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.665566Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--4646c92e-cc4c-4f82-b9c1-28d7c0afe543",
"created": "2022-05-19T20:10:17.666245Z",
"modified": "2022-05-19T20:10:17.666245Z",
"name": "112.213.123.206",
"pattern": "[ipv4-addr:value='112.213.123.206']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.666245Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--b7ca84a1-1ee3-47c1-9133-52cc54f1bd3b",
"created": "2022-05-19T20:10:17.66681Z",
"modified": "2022-05-19T20:10:17.66681Z",
"name": "91.193.6.39",
"pattern": "[ipv4-addr:value='91.193.6.39']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.66681Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--23bf4039-24a2-49c4-b0e9-e8d957d1769f",
"created": "2022-05-19T20:10:17.667363Z",
"modified": "2022-05-19T20:10:17.667363Z",
"name": "74.95.218.233",
"pattern": "[ipv4-addr:value='74.95.218.233']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.667363Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--64e5942e-bbeb-4114-a3a8-2e5d6377c886",
"created": "2022-05-19T20:10:17.667915Z",
"modified": "2022-05-19T20:10:17.667915Z",
"name": "180.150.46.21",
"pattern": "[ipv4-addr:value='180.150.46.21']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.667915Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--402abbde-cf02-4987-8294-ad670b8ffbdf",
"created": "2022-05-19T20:10:17.668471Z",
"modified": "2022-05-19T20:10:17.668471Z",
"name": "188.24.51.221",
"pattern": "[ipv4-addr:value='188.24.51.221']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.668471Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--7bc4185d-fa61-41c3-8eeb-9d9216a29445",
"created": "2022-05-19T20:10:17.669037Z",
"modified": "2022-05-19T20:10:17.669037Z",
"name": "45.80.191.31",
"pattern": "[ipv4-addr:value='45.80.191.31']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.669037Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--6bca36cd-a32f-4487-bfc2-69ddeaf4420f",
"created": "2022-05-19T20:10:17.669589Z",
"modified": "2022-05-19T20:10:17.669589Z",
"name": "195.80.149.24",
"pattern": "[ipv4-addr:value='195.80.149.24']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.669589Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"TLS/SSL Crawler",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--3bea6d20-234d-4c93-b9d3-166e85690a66",
"created": "2022-05-19T20:10:17.670148Z",
"modified": "2022-05-19T20:10:17.670148Z",
"name": "212.99.199.26",
"pattern": "[ipv4-addr:value='212.99.199.26']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.670148Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Follows HTTP Redirects",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
},
{
"type": "indicator",
"spec_version": "2.1",
"id": "indicator--d27587ad-f1be-42bc-9cdc-9dca51a48899",
"created": "2022-05-19T20:10:17.670811Z",
"modified": "2022-05-19T20:10:17.670811Z",
"name": "23.24.169.221",
"pattern": "[ipv4-addr:value='23.24.169.221']",
"pattern_type": "stix",
"pattern_version": "2.1",
"valid_from": "2022-05-19T20:10:17.670811Z",
"x_bot": false,
"x_classification": "malicious",
"x_firstseen": "2022-05-12",
"x_lastseen": "2022-05-12",
"x_tags": [
"F5 BIG-IP iControl RCE",
"F5 BIG-IP iControl REST Authentication Bypass",
"Python Requests Client",
"Web Crawler"
],
"x_vpn": false
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment