Created
May 19, 2022 20:17
-
-
Save superducktoes/f4a2f99fb709c14e8dc7d258f375401c to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
"type": "bundle", | |
"id": "bundle--156aade4-a0b9-4931-aef7-f400b2ffd1d7", | |
"objects": [ | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--7f7cfee6-7cb4-4d8f-8012-bc5959a53564", | |
"created": "2022-05-19T20:10:17.632149Z", | |
"modified": "2022-05-19T20:10:17.632149Z", | |
"name": "31.6.11.98", | |
"pattern": "[ipv4-addr:value='31.6.11.98']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.632149Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-18", | |
"x_lastseen": "2022-05-19", | |
"x_tags": [ | |
"Carries HTTP Referer", | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"F5 BIG-IP TMUI RCE Vuln Check", | |
"Follows HTTP Redirects", | |
"Stores HTTP Cookies", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": true | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--07a72430-9857-44cc-a8f1-0f78fc632ac8", | |
"created": "2022-05-19T20:10:17.64379Z", | |
"modified": "2022-05-19T20:10:17.64379Z", | |
"name": "80.95.214.242", | |
"pattern": "[ipv4-addr:value='80.95.214.242']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.64379Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-14", | |
"x_lastseen": "2022-05-19", | |
"x_tags": [ | |
"F5 BIG-IP Crawler", | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Ping Scanner", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--96d43c3e-338d-45c8-8542-6d55f0baa918", | |
"created": "2022-05-19T20:10:17.645186Z", | |
"modified": "2022-05-19T20:10:17.645186Z", | |
"name": "128.90.59.158", | |
"pattern": "[ipv4-addr:value='128.90.59.158']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.645186Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-14", | |
"x_lastseen": "2022-05-18", | |
"x_tags": [ | |
"Carries HTTP Referer", | |
"F5 BIG-IP Crawler", | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"F5 BIG-IP TMUI RCE Vuln Check", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": true | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--58661a6b-066a-41cd-9e59-99c56454d758", | |
"created": "2022-05-19T20:10:17.64616Z", | |
"modified": "2022-05-19T20:10:17.64616Z", | |
"name": "202.184.106.159", | |
"pattern": "[ipv4-addr:value='202.184.106.159']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.64616Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-18", | |
"x_lastseen": "2022-05-18", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--8f685045-c995-42a7-843f-1250ed7c2d50", | |
"created": "2022-05-19T20:10:17.647118Z", | |
"modified": "2022-05-19T20:10:17.647118Z", | |
"name": "156.146.60.74", | |
"pattern": "[ipv4-addr:value='156.146.60.74']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.647118Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-18", | |
"x_lastseen": "2022-05-18", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": true | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--fb560f14-85ad-4633-b668-bcf576665c2c", | |
"created": "2022-05-19T20:10:17.648048Z", | |
"modified": "2022-05-19T20:10:17.648048Z", | |
"name": "213.252.245.187", | |
"pattern": "[ipv4-addr:value='213.252.245.187']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.648048Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-17", | |
"x_lastseen": "2022-05-17", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--fda673f3-1bcb-4aca-9914-9188de75f842", | |
"created": "2022-05-19T20:10:17.648968Z", | |
"modified": "2022-05-19T20:10:17.648968Z", | |
"name": "222.216.195.223", | |
"pattern": "[ipv4-addr:value='222.216.195.223']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.648968Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--6ce4507b-ee96-4bfb-bf88-b79bb12bf9c2", | |
"created": "2022-05-19T20:10:17.650758Z", | |
"modified": "2022-05-19T20:10:17.650758Z", | |
"name": "82.121.174.53", | |
"pattern": "[ipv4-addr:value='82.121.174.53']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.650758Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--8bbe6fe8-0b1e-417e-9a11-82ac992e100b", | |
"created": "2022-05-19T20:10:17.65151Z", | |
"modified": "2022-05-19T20:10:17.65151Z", | |
"name": "173.230.72.8", | |
"pattern": "[ipv4-addr:value='173.230.72.8']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.65151Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--c6bbac5c-0515-4542-91c4-30a5286db37c", | |
"created": "2022-05-19T20:10:17.652238Z", | |
"modified": "2022-05-19T20:10:17.652238Z", | |
"name": "175.43.35.31", | |
"pattern": "[ipv4-addr:value='175.43.35.31']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.652238Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"Carries HTTP Referer", | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--903bc28a-093e-4334-8c25-60446d9211a0", | |
"created": "2022-05-19T20:10:17.652981Z", | |
"modified": "2022-05-19T20:10:17.652981Z", | |
"name": "172.105.194.253", | |
"pattern": "[ipv4-addr:value='172.105.194.253']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.652981Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--8538a790-17d6-4f79-aa17-ef9210358928", | |
"created": "2022-05-19T20:10:17.653703Z", | |
"modified": "2022-05-19T20:10:17.653703Z", | |
"name": "182.204.177.76", | |
"pattern": "[ipv4-addr:value='182.204.177.76']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.653703Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"Carries HTTP Referer", | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--56967781-441e-4068-8aed-cdfedc15f0a2", | |
"created": "2022-05-19T20:10:17.654427Z", | |
"modified": "2022-05-19T20:10:17.654427Z", | |
"name": "90.102.32.50", | |
"pattern": "[ipv4-addr:value='90.102.32.50']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.654427Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-16", | |
"x_lastseen": "2022-05-16", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--b9b2bf9a-aa39-4d8a-bbd7-c794e2f18ee6", | |
"created": "2022-05-19T20:10:17.655271Z", | |
"modified": "2022-05-19T20:10:17.655271Z", | |
"name": "223.226.135.242", | |
"pattern": "[ipv4-addr:value='223.226.135.242']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.655271Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-15", | |
"x_lastseen": "2022-05-15", | |
"x_tags": [ | |
"Carries HTTP Referer", | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"Stores HTTP Cookies", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--c1a517ae-0eed-4128-9b95-855b4ee25593", | |
"created": "2022-05-19T20:10:17.656007Z", | |
"modified": "2022-05-19T20:10:17.656007Z", | |
"name": "139.177.202.106", | |
"pattern": "[ipv4-addr:value='139.177.202.106']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.656007Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-13", | |
"x_lastseen": "2022-05-14", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--fc143c93-352e-4779-8cdb-f7c01f604b4a", | |
"created": "2022-05-19T20:10:17.656725Z", | |
"modified": "2022-05-19T20:10:17.656725Z", | |
"name": "45.63.127.43", | |
"pattern": "[ipv4-addr:value='45.63.127.43']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.656725Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-14", | |
"x_lastseen": "2022-05-14", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--c57cfa49-4726-4e78-98ce-8fff378393cb", | |
"created": "2022-05-19T20:10:17.65754Z", | |
"modified": "2022-05-19T20:10:17.65754Z", | |
"name": "141.164.40.252", | |
"pattern": "[ipv4-addr:value='141.164.40.252']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.65754Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-13", | |
"x_lastseen": "2022-05-13", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": true | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--d63f9284-080e-42a3-8ac0-6a158f43b617", | |
"created": "2022-05-19T20:10:17.658368Z", | |
"modified": "2022-05-19T20:10:17.658368Z", | |
"name": "81.210.118.10", | |
"pattern": "[ipv4-addr:value='81.210.118.10']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.658368Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--fafb7a66-44cc-4f13-9f70-0adc5d0beee5", | |
"created": "2022-05-19T20:10:17.659006Z", | |
"modified": "2022-05-19T20:10:17.659006Z", | |
"name": "179.191.81.10", | |
"pattern": "[ipv4-addr:value='179.191.81.10']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.659006Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--976c683f-4e69-4eb4-a858-b97ee7d1409f", | |
"created": "2022-05-19T20:10:17.659636Z", | |
"modified": "2022-05-19T20:10:17.659636Z", | |
"name": "200.13.137.32", | |
"pattern": "[ipv4-addr:value='200.13.137.32']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.659636Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--2fa950f7-505b-4376-aff6-9768ff093a02", | |
"created": "2022-05-19T20:10:17.660263Z", | |
"modified": "2022-05-19T20:10:17.660263Z", | |
"name": "81.82.223.106", | |
"pattern": "[ipv4-addr:value='81.82.223.106']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.660263Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--83a552be-17d7-4cc5-be22-c86d37a7d1f3", | |
"created": "2022-05-19T20:10:17.660891Z", | |
"modified": "2022-05-19T20:10:17.660891Z", | |
"name": "173.172.135.191", | |
"pattern": "[ipv4-addr:value='173.172.135.191']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.660891Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--724cc2c0-1dbc-4fbd-9cbe-dc2bd0195e15", | |
"created": "2022-05-19T20:10:17.66154Z", | |
"modified": "2022-05-19T20:10:17.66154Z", | |
"name": "203.125.233.66", | |
"pattern": "[ipv4-addr:value='203.125.233.66']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.66154Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--6ee74070-64be-4a84-bf43-926ab45741f2", | |
"created": "2022-05-19T20:10:17.662179Z", | |
"modified": "2022-05-19T20:10:17.662179Z", | |
"name": "86.41.158.34", | |
"pattern": "[ipv4-addr:value='86.41.158.34']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.662179Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--6559c4ae-8617-4e7d-99d0-ecfa51483b7c", | |
"created": "2022-05-19T20:10:17.662802Z", | |
"modified": "2022-05-19T20:10:17.662802Z", | |
"name": "188.65.47.103", | |
"pattern": "[ipv4-addr:value='188.65.47.103']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.662802Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--3ae5a717-a437-4062-b383-ae01e8b3d3ba", | |
"created": "2022-05-19T20:10:17.663427Z", | |
"modified": "2022-05-19T20:10:17.663427Z", | |
"name": "199.127.202.206", | |
"pattern": "[ipv4-addr:value='199.127.202.206']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.663427Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--7d088444-99f4-4468-8554-69cff4c0a0d1", | |
"created": "2022-05-19T20:10:17.664057Z", | |
"modified": "2022-05-19T20:10:17.664057Z", | |
"name": "5.2.161.92", | |
"pattern": "[ipv4-addr:value='5.2.161.92']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.664057Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--5627e7c5-c125-4ca3-b2d6-7dc1cd165524", | |
"created": "2022-05-19T20:10:17.664865Z", | |
"modified": "2022-05-19T20:10:17.664865Z", | |
"name": "71.180.42.18", | |
"pattern": "[ipv4-addr:value='71.180.42.18']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.664865Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--920489e6-12cd-455b-bccb-60b8606ac229", | |
"created": "2022-05-19T20:10:17.665566Z", | |
"modified": "2022-05-19T20:10:17.665566Z", | |
"name": "68.232.62.65", | |
"pattern": "[ipv4-addr:value='68.232.62.65']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.665566Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--4646c92e-cc4c-4f82-b9c1-28d7c0afe543", | |
"created": "2022-05-19T20:10:17.666245Z", | |
"modified": "2022-05-19T20:10:17.666245Z", | |
"name": "112.213.123.206", | |
"pattern": "[ipv4-addr:value='112.213.123.206']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.666245Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--b7ca84a1-1ee3-47c1-9133-52cc54f1bd3b", | |
"created": "2022-05-19T20:10:17.66681Z", | |
"modified": "2022-05-19T20:10:17.66681Z", | |
"name": "91.193.6.39", | |
"pattern": "[ipv4-addr:value='91.193.6.39']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.66681Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--23bf4039-24a2-49c4-b0e9-e8d957d1769f", | |
"created": "2022-05-19T20:10:17.667363Z", | |
"modified": "2022-05-19T20:10:17.667363Z", | |
"name": "74.95.218.233", | |
"pattern": "[ipv4-addr:value='74.95.218.233']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.667363Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--64e5942e-bbeb-4114-a3a8-2e5d6377c886", | |
"created": "2022-05-19T20:10:17.667915Z", | |
"modified": "2022-05-19T20:10:17.667915Z", | |
"name": "180.150.46.21", | |
"pattern": "[ipv4-addr:value='180.150.46.21']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.667915Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--402abbde-cf02-4987-8294-ad670b8ffbdf", | |
"created": "2022-05-19T20:10:17.668471Z", | |
"modified": "2022-05-19T20:10:17.668471Z", | |
"name": "188.24.51.221", | |
"pattern": "[ipv4-addr:value='188.24.51.221']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.668471Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--7bc4185d-fa61-41c3-8eeb-9d9216a29445", | |
"created": "2022-05-19T20:10:17.669037Z", | |
"modified": "2022-05-19T20:10:17.669037Z", | |
"name": "45.80.191.31", | |
"pattern": "[ipv4-addr:value='45.80.191.31']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.669037Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--6bca36cd-a32f-4487-bfc2-69ddeaf4420f", | |
"created": "2022-05-19T20:10:17.669589Z", | |
"modified": "2022-05-19T20:10:17.669589Z", | |
"name": "195.80.149.24", | |
"pattern": "[ipv4-addr:value='195.80.149.24']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.669589Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"TLS/SSL Crawler", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--3bea6d20-234d-4c93-b9d3-166e85690a66", | |
"created": "2022-05-19T20:10:17.670148Z", | |
"modified": "2022-05-19T20:10:17.670148Z", | |
"name": "212.99.199.26", | |
"pattern": "[ipv4-addr:value='212.99.199.26']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.670148Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Follows HTTP Redirects", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
}, | |
{ | |
"type": "indicator", | |
"spec_version": "2.1", | |
"id": "indicator--d27587ad-f1be-42bc-9cdc-9dca51a48899", | |
"created": "2022-05-19T20:10:17.670811Z", | |
"modified": "2022-05-19T20:10:17.670811Z", | |
"name": "23.24.169.221", | |
"pattern": "[ipv4-addr:value='23.24.169.221']", | |
"pattern_type": "stix", | |
"pattern_version": "2.1", | |
"valid_from": "2022-05-19T20:10:17.670811Z", | |
"x_bot": false, | |
"x_classification": "malicious", | |
"x_firstseen": "2022-05-12", | |
"x_lastseen": "2022-05-12", | |
"x_tags": [ | |
"F5 BIG-IP iControl RCE", | |
"F5 BIG-IP iControl REST Authentication Bypass", | |
"Python Requests Client", | |
"Web Crawler" | |
], | |
"x_vpn": false | |
} | |
] | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment