{ "type": "bundle", "id": "bundle--4b312963-4eb8-4e7a-b6eb-077234754e17", "objects": [ { "type": "indicator", "spec_version": "2.1", "id": "indicator--f632c888-181b-4880-8f2f-fc66016de5fa", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.65.188.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:38:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2565a456-50f2-4aab-bd62-4a1831ba02b3", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.55.144.131']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:31:28Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--23f4c2f0-c5a1-4afb-9e58-fbeb78d853dc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.62.152.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:29:42Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ee7cd135-1464-4fd0-b890-041b8aa1046c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '23.28.200.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:29:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a1d34fa8-d8ac-4142-8f0a-7f61cee63e8a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.22.196.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:25:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ecf3c290-2ad9-483b-acd0-78ff11887ca0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.62.17.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:14:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d4469d0c-29b1-4b3b-9d4d-c9e433168709", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '198.211.109.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:12:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8454d6f4-3551-44c0-b047-e0152fac09cc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.75.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:58:56Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--73451058-dad2-4e7e-b79f-efea18cf5f29", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.75.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:58:55Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c5860481-491c-42a1-9e47-be2852e325ed", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '18.144.126.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:34:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c23016f3-7cf7-4ebe-8a92-ec8585b2a25d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Flood / DDoS", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '102.220.163.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T00:12:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d91fc9bb-3c1a-4d18-b2e7-bf3af37b6f0b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Flood / DDoS", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '130.12.182.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:34:29Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8de84dc1-9db5-4080-932f-246824c2137f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Flood / DDoS", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '93.152.221.51']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:37:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4c54d488-0dd4-445d-9d23-5a6dcd3b0283", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.215.177.28']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T23:20:35Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e65d586c-5c06-42e9-802d-f8bbcb582256", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '220.197.85.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T22:29:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5814a908-0295-45ed-af7f-856a82f35dff", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.43.163.94']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T21:59:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ff3b503f-6e78-4b28-8217-fb39e0eb7831", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.153.96.194']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T20:44:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--70636a92-9ebc-4c2c-bb2e-8ff2db2feb7b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '24.17.148.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T20:22:21Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--41886a74-a53f-4d7a-8080-900445549237", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '136.49.183.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T19:59:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a90090cd-5267-41d0-af2f-a03274d16305", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "LFI wrapper PHP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.132.195.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T19:25:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d7180b90-823a-4d5b-9232-9da6686124dc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '172.115.193.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T18:53:56Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c290f2ab-b271-4716-97ee-0ff35dc651f7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '44.234.24.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T18:25:57Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c2c692be-b206-4dd4-a116-9429eeb3797a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '123.14.127.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T16:43:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e0e410b7-757b-4617-bd55-bb5159baaefb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.74.28.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T23:41:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f83491be-e77b-4118-80a2-34fcb836e267", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.75.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T13:05:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3b06ef6e-c909-4052-b2ca-6e989009d517", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.75.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T13:00:27Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bf195850-53ea-4e25-bbbe-9bd3b1700544", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.75.105']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T13:00:27Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ab8469ba-8ae1-4897-a778-0e90114ede0d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.153.26.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T12:47:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--686e9b96-3ebb-4bb9-8ede-37dadac4fa6b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '139.144.207.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T12:40:05Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7d4d5ad6-c69a-40ad-a978-5953147d422e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '187.14.82.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T18:08:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--56fe312c-6dad-443f-8dcb-703a656f49e0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Flood / DDoS", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.89.160.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T13:51:32Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a80e6345-0cb6-4461-b9ee-b0ad554ecabf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF interne", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '89.208.53.122']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T08:53:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d1e5d5e7-894e-4ad5-b66b-6cb1f355aa8b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '44.243.138.176']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T07:03:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a5af4cb4-aea6-4408-a56a-b72423251337", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF interne", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:14:29Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b3b16414-86a0-4c0d-b80d-bbb9fbb22f9a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '201.79.62.57']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T05:31:35Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b374bdd6-2ab5-4b3e-9c27-d5f7e830cc69", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '184.169.185.96']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T05:29:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--207636ba-b821-4582-a831-a09b3d217f70", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '87.192.41.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T02:03:46Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b06e5986-bcae-46cc-a0b6-783684de62dd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.74.28.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T04:17:13Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2e5b3997-ebac-4280-b154-bb2542b750f4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.241.184.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T03:29:28Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f3edd99-8a5f-4a6c-ab7b-e93acbbd1289", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.205.117.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T03:03:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d1e346c3-dccc-43e2-a3d1-b5d8e4ef2929", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.53.253.137']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T02:48:39Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eb03516e-55df-4094-8d5f-c9a05234b1cb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '172.58.49.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T00:49:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--511acc2c-03d1-4853-ac43-9fae231ff79c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '184.52.98.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T00:29:59Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bdbe98d8-6f3c-4b05-9d59-9544635bfb4c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Traversal LFI", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.205.1.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T12:11:36Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0cd30898-7020-4bec-8554-5357caaa76eb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '103.244.227.48']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T23:23:05Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--46585e53-8ba6-4b5c-a0d2-cdc386cc0b77", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.183.133.204']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T22:50:46Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cdb4f783-b658-4ac2-b406-44d4028463c1", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '74.194.108.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T22:23:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--223b953e-a0a0-4f1e-9974-827f565cd411", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '138.68.73.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T19:56:30Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--146b3306-257a-4559-86e9-4c49c2977735", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '18.144.169.31']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T19:34:35Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--53615d15-a791-4bfa-b80d-38ba790cc2b9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '52.248.42.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T18:11:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--991e1858-67c3-4848-8516-781896a98abf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '97.102.6.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T17:39:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--87cc8d41-ce7c-4b61-8480-6ef4ff4e4af0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '184.33.99.133']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T17:15:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4469ff47-001c-4c42-bc89-be08073b3a3e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '107.150.97.180']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T16:03:30Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--05801133-b416-4522-8b1b-c23f270a2039", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.183.86.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T15:04:25Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d0e4e24f-ad17-40b9-b15b-461796f6b3ac", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.215.243.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T13:41:07Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--791bcf60-0da9-4cd0-903b-877c07138efb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '103.211.16.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T13:08:30Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--febb7752-4341-4e11-8ef7-d89c0aa27ae6", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '223.167.168.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T11:35:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--62edff67-dd61-442d-845e-3c1be32125f9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '121.66.245.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T07:05:42Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fe669769-f5d9-47b8-a6c4-60952d0f0e95", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '185.15.209.148']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T07:16:28Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dc2c6d90-0d38-48c8-97d7-95c8e8b6771e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '59.52.102.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T09:20:53Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cec74281-fa5b-48c3-b1e9-6ce0226370bf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.172.185.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T11:29:21Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c613c583-5fdf-43f0-b18d-b4c106f062c8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.22.166.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T08:22:29Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--46b13c84-2009-44d8-8d0e-40641b5269bd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '13.52.98.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T07:34:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b405d181-8beb-4835-aeed-d781ff29560c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '202.161.188.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T17:10:55Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4990a594-738e-4862-9511-3b6ae4df8326", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '18.144.29.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:47:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--75541104-b5e6-49ff-9349-6ba3958cf08d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '61.16.122.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T03:33:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--25e1fd2c-e18d-4d35-963f-7b49ff8708d3", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.172.155.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:34:36Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--54adc6ff-26b6-45a1-b526-8fad36d0d10e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '138.197.146.4']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:33:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4766d6f8-89ed-4e32-a286-393d672482de", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.132.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:31:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3c0946f2-ea77-4767-a81a-0b998b2e2ca4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '178.128.144.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:22:46Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--343e63c0-780f-464a-bbc2-33a02077aab7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.82.12.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:21:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--85b6dd52-5bce-4725-8315-01268ba03e1d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.121.227']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:17:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--202e6b09-820c-4809-9f3c-cb9d4f1a5fe2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.14.94.108']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:16:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0272032b-8fd7-4a9c-bc6a-8d65f2e9bebe", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '146.190.29.70']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T04:49:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1702be1a-ef52-455e-a654-93e66794f990", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.62.77.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T04:42:35Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dff82965-dae0-46b3-8ddc-fbac493fb50c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.31.79']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T04:32:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2cdcfd35-f864-4e75-88d6-8e5e2024a43a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.172.151.93']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T04:27:17Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5fa1166f-fef0-44d3-ac5a-172cb7595643", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.192.224']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:46:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5594f3b7-d9bc-44cd-930a-eec2a5a84851", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.22.120.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:37:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d6c2c5bc-0e1c-4559-9caa-e54a64557eac", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:14:44Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--92a9dd5c-377a-4f0d-9c67-90c48a9c4415", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '76.36.7.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:32:56Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1cb5b3e0-a14c-4ec2-be15-5804f6f54d0c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.244.139.98']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:30:30Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f266c26-24df-4160-b8be-a7ec60e5748a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '124.88.113.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:15:05Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8bae002a-144e-40d3-8924-81ea525fddb2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.122.122.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:06:23Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8af27c1c-3515-4b57-b05e-dc41e162683e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '3.101.59.207']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T03:05:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bdfaa758-e806-4c81-96a6-8dc0e266596d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '52.53.188.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T02:50:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8a630eba-61d9-4bdf-ae8a-81cc1515165e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.89.232.201']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T02:31:20Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4de50672-50d6-4832-a651-5e74c44ce83a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '116.148.93.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T02:25:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--48419270-4daa-425d-a23e-8e3572ff39f6", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.203.114.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T02:16:17Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--96466878-7240-4d8c-8ec7-173a62aca7cf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.89.53.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T02:15:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--21429d4e-6620-4d20-a6d0-d60d6a097391", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '188.166.50.24']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T02:11:06Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d8b3e4bd-1602-48c8-98ed-742a99a11c02", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.22.22.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T01:02:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fe007420-3dac-4ef6-8773-e3948153de88", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '201.79.59.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T00:59:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--68724ca0-a001-44d7-afaa-e982ec7a419d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.180.246']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T00:49:21Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ba5f978d-d9ae-41ee-8191-bfa8001be189", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.65.119.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T00:46:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--64e6a684-20ab-4ef3-9df3-b7379b12ceb6", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '101.67.138.72']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T00:31:08Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--236245da-76b0-48a0-897a-163aa09b4441", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.141.77']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T00:22:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b14cf351-c58d-43fb-a603-0c7b3b645bf9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.230.216.199']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T22:50:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--735ed73b-d35c-4d43-9ffb-49e9c955c915", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '198.211.107.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T21:51:49Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ced70161-58a1-4835-8013-edf54242e3e6", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.134.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T21:37:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b0114d49-a7fc-4d60-9621-42a35ee2c077", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.193.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T20:59:07Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--07fed639-4675-4bb2-89a2-439da477fc04", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '42.96.36.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T23:05:32Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8d48c81f-2003-44c3-99cc-1409d49af66e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.129.51.170']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T23:04:56Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--322a61af-3bc2-431f-91a0-e384f8439b49", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.150.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T20:28:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ffa898bc-28dc-4a7c-9519-05cbd2a730b5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Flood / DDoS", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.118.240.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:58:02Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8b957c60-25ea-4887-bc8d-16fc98df2064", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Attaque botnet", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.139.104.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:51:04Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ba67eb90-6aed-441f-8bb5-5df906eecc0b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.233.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:49:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--02b75b7d-9795-4197-b076-8b0791339012", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.248.122.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:38:23Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--885ed8e1-ea47-4709-8fdf-d70082b459dc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.224.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:32:41Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e52f4ab1-0e47-49e6-af05-eaea5b6bea85", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.14.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:15:05Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d0a48c4b-b600-4d1c-b950-550edaca1b6e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.139.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:10:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2dc0fa8c-5c05-46d5-9bd0-bbcf48f6986c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '139.59.161.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T19:07:06Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cdef1317-ddcb-4afb-8c6b-e43b424fa26f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.94.187.10']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T18:51:55Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d2162622-175b-4676-ad2b-78f0b11a588e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.192.97.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T18:45:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3f33ed3a-8bef-4012-a6ce-e8c7248b4984", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.227.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T18:28:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--579abb50-cbb5-4a4d-8afd-8daf3032c573", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.184.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T18:10:02Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f9df047d-c561-457a-8232-fd514485f86c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '138.197.67.47']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:58:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b70a28a4-9b7e-41b5-8a77-c827bc25b6fa", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.113.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:54:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b510f7e6-77ca-4919-adb0-2b0612972639", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '146.190.209.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:41:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0f7ba5c1-ed57-4226-b320-e3277bc23589", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '206.81.2.36']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:24:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--42811985-d992-45ef-bbff-be2dae113ecf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '46.101.46.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:12:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--233ecb85-4261-4586-80a0-b3801b33376c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.150.29']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:06:44Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--386a24d5-74d5-4262-96c3-300876a40329", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.71.25.232']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:05:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--29cfe8cf-288a-4fa9-aa1c-20931588af28", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.157.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T17:00:38Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--76ba04ec-dd99-479a-97d1-f6441f42c9ac", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '195.251.223.206']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:20:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a3bf8261-814a-4a7c-a2b9-9a1031faffca", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.230.233.243']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T16:29:38Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3616090f-db10-43b9-896b-7a69d60b6a6c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.255.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T16:21:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0945bcdc-3284-42cc-847e-f97b4c2cbac9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.122.98.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T16:00:44Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2a3fd8b8-2ee3-4f6e-99aa-a8e1476d244c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Traversal LFI", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '160.119.76.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T15:43:27Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e01ec1fa-a460-40b4-90e3-5350fb0b0ec0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.114.253']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T15:34:07Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--69caddc6-0cd0-4552-b321-6bc914c17218", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.136.45']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T14:43:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b9984a4f-34b7-49c0-b4f9-3e6f55e14241", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '164.92.226.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T00:52:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f376f66a-c471-4485-932a-681a6675a0bd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '23.239.9.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T14:36:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8536b991-bd22-4e99-98b0-b7847678253e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.111.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T14:08:23Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--20ea538e-f320-4f0a-8129-99b66d2b93d0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '188.92.131.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T14:05:38Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2e38ca41-acc4-4234-aa62-56ca81288895", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '168.144.157.111']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T13:36:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--247d204c-9ee6-4230-912a-a281423ad170", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '197.44.53.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T08:05:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ac6784b9-a6f2-4432-9fe4-c58c33dfb4e5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '168.144.181.202']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T12:55:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7123a650-f8bd-411b-a5b2-4fbd040e00b9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.165.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T12:50:25Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e43d76a8-01bf-480c-b3d1-10790391ac04", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.76.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T12:29:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6b268b05-0c3b-4dae-a295-cb5f8faee6d7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.248.239.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T12:26:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--023bfeb7-717f-479b-9d38-7f6cdfa1caa1", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.69']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T01:09:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b747789f-eacc-44bf-8b99-ca9bf901ad0e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Traversal LFI", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.13.216']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T15:43:27Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3ce6eb8f-62ff-4ba8-a299-c6b9085df9d7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.122.28.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T11:15:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a5c5fb25-b5ce-4c58-a253-b0d1ae935140", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '47.237.102.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T11:06:01Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--36f0feab-4ff1-4a89-a0ba-3a31c3f20d12", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '47.236.144.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T11:05:36Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fa66a9cc-94e5-461f-bdb9-c555beb05867", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '188.166.48.80']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T10:51:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7d0b4049-1817-4b50-9f7e-de49dfd3dea5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce SSH", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '31.40.204.130']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T11:50:06Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2aa62fd9-6336-4cd8-8224-021f4109e655", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.113.17']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T10:25:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ac16384f-e700-4d33-b9ae-66f6637d60e5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.155.169']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T10:15:16Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ee1d44ca-4b1a-4cff-b4d3-e433f0fff3cb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '192.241.128.146']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T09:57:20Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0c3b3d94-c118-465c-a4dc-f971185d22cd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.135.254']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T09:57:13Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b4ae724d-75b3-42ba-8ed3-786e17bc3826", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.227.31.211']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T09:56:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c88a7120-433b-495a-a665-b9a4cf2ced1f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.190.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T09:13:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4c2bd860-204c-49eb-92ab-cb9380fa1a24", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.118.9']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T08:58:25Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--691cdc21-ed2f-4a77-96b3-4487b920982f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '198.199.67.239']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T08:12:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ecf4f931-3db7-45c7-a320-6515189174d2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.126.174']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T08:09:26Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eaac1e51-9892-4aa2-ae55-76795477277d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '160.250.132.117']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T08:07:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d0aefb6e-ad42-4848-b20d-3d915bf28a4f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.205.127']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T07:44:39Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7c01b700-d266-4734-b51b-7197b3392961", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.30.18']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T07:42:47Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8d3a6704-9306-4708-8df7-71ac6bdeb0f7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.107.223']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T07:29:46Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ef5525de-ce95-4d9b-9439-92f544c461a9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.103.134']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T07:12:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--623e4e90-8dbf-4671-9e86-582e2ced9b20", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.172.6']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T07:10:04Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e19d7c53-83f4-4705-88f1-1038a3fd9ff9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.248.239.183']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:48:53Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--372e13c0-e7e1-4b7e-a45b-e94e84f948e2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.248.27.152']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:45:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cf09a47b-b20e-4ae1-92b1-15547f1942c9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '3.101.147.171']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:40:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ea1bf61-993c-4ad1-950e-ca79b0dacf2d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '209.97.136.25']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:32:20Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f345a983-21b4-4cd4-ba76-4f2831edca0c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Traversal LFI", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.171.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T18:03:08Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b266721a-b7ae-4b8f-b371-05e4a5f716d5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '139.162.51.186']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:22:28Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d7582319-02fa-4e70-a431-698068696711", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.122.10.247']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:21:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b52f0082-f892-420b-8c4c-71e8926a561f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.216.20']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:19:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e4791cf0-8897-46b1-912a-3ff931676e5a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.173.145']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:12:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dd37ee17-733e-4565-9c05-6e6a43ef2dd7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF interne", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:10:04Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8528aed1-2b6c-4f8e-bd7a-c71602c0c3e0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '206.189.176.241']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:59:20Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1b3386e5-d10f-48cf-8d59-6e6e1693f526", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '147.182.173.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:52:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a1ef4777-0666-45e9-ba8c-8e080cb409ec", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.68.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T15:00:38Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6ab28e78-7484-430b-a07b-f122d058810c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.182.167.13']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:50:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--989039a1-b881-4720-989f-5b8571a16d0b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.205.46.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:17:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6b7a3dc4-7af4-47f6-b583-701e9dd83daf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.65.226.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:08:26Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c22fcdfc-be9e-450b-a25a-c7f103bd56fe", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.155.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:07:47Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1603cd43-a823-4e69-8c8c-739b2a70f0a9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.22.6.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:07:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f9ddff5e-c7da-4286-affc-1c66e8433478", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.79.2.200']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T04:58:07Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--63bc3427-1efd-4925-bede-7b9756799f87", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF interne", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.37']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:08:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1ea2c67-d86f-428f-88d3-bb4fde1d8911", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '172.251.228.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T04:53:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--620a1b3c-e25a-4a52-a862-f6f6b399dfd0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '198.199.79.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T04:35:23Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dd3681ca-478a-438f-9e08-d11f4a713156", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.146.144']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T04:35:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--04db9469-91af-45b2-bb69-4a833f4186af", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.215.84.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T04:10:07Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7a9ed4e8-18e2-4124-8779-a97b78127c94", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.156.73.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T05:42:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d86115da-35c8-46df-bb65-09ec25f57b1b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.225.67.128']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:40:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2bcf7d33-fce4-4d25-839b-5cd0758f1fc2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '178.62.212.203']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:40:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e453cc36-5078-4656-8e2f-2f3c4779c4b3", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.101.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:36:32Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--983c1014-b79c-4579-8ce3-36ed09e1075c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '32.186.138.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:25:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1552a8cf-280c-4f5c-b623-f06effefd8a4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '138.197.109.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:16:32Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--363b6ee2-0e44-4479-8a8f-61709520c76d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.167.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:03:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9751612e-f5d5-49cd-8f8c-b36db0ed797f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.140.50.189']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T06:04:21Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--37d23fbb-f56b-4671-a12e-08ac47e84bcd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.55.130.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:47:26Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4743acd8-4e76-4229-a3df-ae53c4a4280f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.215.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:40:59Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--33adbc30-9de8-40ea-b569-41fa15a794d0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '139.59.11.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:34:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--74e37b60-baa4-453c-b9b2-00bb4f6d8b9c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.44.5']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:14:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--03ca995f-df3d-43bd-b5f5-3f332f058d1e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.80.21.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:12:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--23259f87-65bb-4e04-8af8-257a8c3b7e16", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.55.72.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:05:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d5af40f6-495a-4858-81a5-146bf78b72e7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF interne", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:01:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ea0ad4ab-58c4-4796-a9fd-9eda4cf12773", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '174.138.11.187']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T00:56:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3e42f4e6-9786-4173-88cf-266e78cc6b8d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.50.175.15']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T00:17:23Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--291f42af-3107-4744-bcc7-61fdbe3a654f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '61.32.69.107']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T00:08:49Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0d3f855e-b582-44ea-9d23-15aab721f6f8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.248.130.88']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T05:10:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--beb4b970-3217-4263-99dc-8ec6b5942425", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.93.18.175']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T20:00:57Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4c9840f9-e8be-4147-a597-07b41bb98785", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.177.44.248']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T19:57:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--110cdba7-f723-42de-9292-8afb0c5a4913", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '97.97.254.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T19:26:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--909dd4c4-4efd-4c07-8325-51e05f4a2658", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '188.92.131.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T03:24:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--410928dc-1c80-4f0f-8b68-287fd4597247", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '13.52.100.158']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T14:41:36Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7b1f86fe-6415-4346-becc-a6dfbf8360ea", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '87.251.64.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T22:38:17Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4279b5b4-c561-4acc-9ff9-59cce02ce9f4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.62.10.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T19:34:36Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--58852a83-8a79-4dce-b533-6aa182706579", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '52.53.215.76']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T12:40:32Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cac6dece-b776-45a3-a455-ece4f7f6fa90", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.64']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:19:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--13f582d8-9d53-428d-bc57-9f559cd95d85", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '100.4.206.32']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T10:48:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e3e4d885-f442-4da2-9a53-20f68966ee82", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '76.87.211.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T10:25:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e304fd45-34e8-4c1f-bf00-e5fdfd42465c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '172.234.64.238']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T20:10:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--114429cf-0e07-46f4-9d36-c854945d5f1b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '74.121.90.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T09:49:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bb296d9a-25ea-4a55-865c-62233e01c2b5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '44.234.122.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T09:46:35Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a99c2730-7b9f-4aca-a2b7-b302d7fcc434", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.29.233.138']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T09:22:46Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e07aea47-042c-456f-aef9-cbee0a7af052", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '176.65.149.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T10:42:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0a9bb95e-520f-4515-9b77-fdbbdaaed06c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '124.88.113.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T07:30:26Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--5c6f408a-cb22-4b16-94b3-0be0901a3a7c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.140.206.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T09:13:59Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--edb0757d-7e09-4015-8fc2-7dbc30c5c0d0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.95.7.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T06:46:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2184ac4d-5a63-4d49-ad2f-601b466f41a1", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '103.186.224.14']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T09:23:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fd778609-87ee-42bf-8a6e-a458b0e6c7f4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.227.204.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T06:29:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--08643c48-6b63-4b9e-8378-1cd7628eea6d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '138.124.2.89']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T10:51:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--77048a26-ae7b-41c1-8e6b-3972fe36b84e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '209.38.251.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:31:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eb9c7e23-fd83-424b-a5d2-4519cd8c856c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.62']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:19:13Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f01a405d-9ea1-41d2-81e7-96d8e734e953", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.225.98.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T23:37:45Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--80876f4b-1ae7-4285-8a18-480dd1f12a94", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.172.252.185']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T05:36:53Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a26e5728-ef61-416c-bc2a-7017ad4b3b8d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '124.31.107.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T05:32:04Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6e78c310-9b88-4a69-8408-0b2dd6280b33", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.254.70.219']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T00:50:06Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ea28cd96-cd5f-46c6-a80c-a0c70e2c0740", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.76.68.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T05:21:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d3dfe7c0-ea15-4ab6-8513-98cc87b11af6", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.22.74.112']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T05:07:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d6436a76-7514-4b2d-8200-d062fd13a7f3", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.155.123']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T05:02:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b330b131-11f9-4cf2-982a-68d52cc3f6b8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.209.104']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T04:58:02Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--185d996c-7099-4be6-82fd-7b924deb91d5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.155.35.41']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T04:44:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6daa244f-1209-4cab-af65-e0e10aeaecfc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.65.114.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T03:29:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fdcad30b-b0d9-4864-998e-6122c8934e15", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.150.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T03:09:30Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--30612a55-af47-408f-ad27-052d69c032cd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.230.93.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T03:03:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--10a7185f-0074-4f72-9af8-5c41783c9a5e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.108.236']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T02:49:45Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1c4e91a9-00d8-45a5-ab75-31739eae031b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '220.167.232.157']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T02:44:53Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f7b5b5a0-9043-448c-9d41-4a1453529adc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.162.11']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T02:43:06Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9d21a584-487e-4d1a-a3dd-5cea8892cf85", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '164.92.254.27']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T02:39:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e99eae08-2b32-4ea1-8953-812558c1b364", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Flood / DDoS", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '79.72.60.87']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-17T04:02:39Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--663d5a5a-b204-4809-bf0c-cdb2515be35b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.100.19']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T02:19:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--60bd5668-0069-4652-a159-85d33bfa24bf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '44.250.198.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T02:16:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--47aa0515-ac29-4d09-8cc6-cd3d6bdde41d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '199.165.159.21']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T01:14:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b5d6ab76-3539-489b-8f45-6a199b273dc0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.172.149.106']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T01:14:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b3f11947-4a85-4b6f-bb9a-31690c47fcf0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '180.93.138.150']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-18T00:14:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a0ce438d-fad0-4ffa-9b86-9e9a417f4a49", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '174.138.87.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T00:48:25Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1e125cfc-ebe3-429e-abf7-4385c0c8e5b6", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.137.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T00:42:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a2a8e967-c409-4675-b26f-f7fac1a49711", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '79.105.249.121']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T00:41:04Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7012803f-adca-43fa-8289-876503d1c0e5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.245.67.3']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T00:30:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2b84a0b0-6246-4159-b8ac-b40fbaa387b8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '111.162.144.210']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-14T00:09:02Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fcbb41ab-c63a-42cf-b81f-e3c97797a63e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.245.239.95']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T23:58:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bf338151-bfd2-4417-944b-0ad245d5d173", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.121.242']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T23:19:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b0b90690-2d20-4e53-b055-13178b9a4514", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '138.197.124.7']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T23:00:50Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6aaefa37-5fdf-45c5-aff8-2b62decaf33d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.50.228']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T22:34:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d62903ab-c0c4-4e4c-be38-cd0dade844f8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.70.214']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T22:09:56Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c8932fb3-5708-4040-a0b5-23dfaed1ad45", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.22.4.109']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T21:26:38Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1dcb934d-ffaf-4654-bb46-244c4b10f9bf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.68.168']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T19:32:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--29125e09-7223-4ac5-bf89-476cd42f377e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '151.245.151.164']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T21:06:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--affd0271-2687-4946-a3e4-322f46b871ba", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '151.245.151.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T21:03:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dd01b51b-bf5c-40a7-b5b1-7ef94fb47cd3", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '121.29.84.166']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T20:25:57Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--eb3c0999-7897-4003-baeb-40f0ec9b72c5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.68.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T20:08:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ee79e6dd-514d-4268-b258-03a295e840dd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '113.206.180.249']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:59:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--68ff0ef5-6c57-470d-9299-f52ad9fea7c4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.135.92']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:39:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6542a38b-2934-43a0-9146-b56720111a38", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '27.17.204.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:38:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7968dca8-2926-45f6-b8f0-b9da8f54e0cc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '147.182.137.23']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:34:45Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f270d4ab-6264-4377-9560-98cc0c4242ef", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.190.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:29:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2c05745f-ee48-4b36-9600-b95f2a3655a8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.5.217']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:22:42Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4cbb5f2c-49e8-41aa-805e-f0950dfe69fb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '54.193.96.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T19:01:49Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--84a8e090-bef8-4c1f-ab8a-8d1f17956045", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '24.199.86.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T18:38:58Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--19a2a32d-c8b2-4b6b-9fdb-5878e8843d88", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.61.141']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T18:32:57Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0b18bd01-dfbc-4c06-b3b8-4b74b1dc2259", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.244.171.212']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T18:28:14Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d31e4af1-f100-421e-a54f-7f809fe9746e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '117.29.8.26']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T17:46:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--772965da-7fa0-4e4d-aad7-2b29a20fac2e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '206.189.207.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T17:21:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--053b86d0-b3e3-476f-83a0-c14df55e6966", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.227.72.221']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T17:14:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--00c3376e-d296-4f4e-83c4-2ab3c2571632", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.30.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T17:11:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8f5594b7-98f1-43dd-9393-2c1908d701c5", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.117.244']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T16:41:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f45aada6-a5ec-40db-ad90-25a0eadcb4f7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.167.129']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T16:34:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--346cee37-ff4f-40e0-9bdd-640be9649e7e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.67.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T16:15:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6e5011e8-7324-454b-9162-3ddef7045504", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.96.165']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T16:13:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2e4aecdc-4593-490c-a1e0-b7e861c09361", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '192.81.211.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T16:06:01Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--de28c5a9-0fac-4893-a7d6-0a38cffaf12a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '44.234.48.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T16:02:13Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8ecdf12d-1d13-446a-8afe-e9acf83e0cde", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.206.178']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:57:13Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d9370306-f653-4ff6-9e9a-1cd795e1c8b4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '107.150.97.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:50:42Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--cef92d9e-32f2-4164-878d-679a63a69ea2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.151.198']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:45:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e6a2bc48-e65f-4c18-93b4-5091fe447131", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '3.101.12.90']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:42:08Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c7534e35-d5ae-400a-b60a-f04012068484", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.227.22.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:14:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c133f9c4-bc72-4895-bd7a-3aa7797675df", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.230.82.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:09:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c4254a5a-ccb9-45ca-8d1d-794fa39d9c3a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '94.102.57.237']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:01:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8a9ac7d9-eb64-427c-8fb7-88a3525ea679", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.230.185.155']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T14:43:14Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f688ca5e-6fd3-42d7-aac1-1dbf47c0c641", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.89.230.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T14:37:43Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2e9ca205-e1b9-4f46-b6fb-0baed705e231", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '72.89.7.49']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T14:10:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--36a8cf53-e15f-405a-a627-c2b60ca8f10f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '106.117.111.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T14:09:17Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c00cf618-77e8-4abe-8c8a-969770e73e57", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '16.146.154.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T13:59:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--46daa249-148f-4579-aa5f-4f6c991221bb", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.114.190']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T13:49:16Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--bec28163-6643-4baf-93b7-7e39e5d16420", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '47.200.147.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T13:47:41Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--56295441-d006-4609-a2d2-dcb44514956f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '142.93.203.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T13:46:36Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a47ac186-6ae4-4f6c-9d84-f0314c403761", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.123.147']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:45:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f4b79310-5f25-4a8c-8e2c-091780a9f46f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '147.182.170.172']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:40:59Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--90e41246-7099-42f4-ba9d-b1d002752451", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.27.226']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:25:14Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--7f3b7ae3-344e-4961-8884-52114ae826ed", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.207.95.192']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:21:44Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d60dd0ae-9ab3-418f-9e6f-8e116813b35e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.109.182']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:20:19Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--794c3be1-7f04-436d-96a2-90d7755b60c4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.245.86.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:08:52Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1b724360-78bb-4b8d-9291-762ed7e86cba", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.172.131.124']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T12:07:59Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--efc32b96-4f68-435a-95ec-52a795a382c1", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.25.154']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T11:47:49Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c45c0b44-689c-4e81-8619-ea6b6b16b54f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '128.1.132.84']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-15T01:23:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--657d1858-2273-48ab-bfe0-b937bc9eb397", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '194.233.69.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T15:48:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2ac1f52c-3697-4038-87d5-3c6be139725d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.48.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T10:53:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--aebdf33d-49c6-48c0-b72f-97b48d7f2d6c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '206.189.21.213']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T10:38:49Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--10fa1591-a74c-4468-8d97-df762f9e4b0f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.133.143']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T10:11:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e7cabf0f-2cfc-4e06-8402-7c4490d014d0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.203.126']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T09:58:01Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1596b35b-a32f-4345-935b-7e34667de050", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '206.81.3.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T09:43:59Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--15c8d586-5cba-44da-aeb6-e7c66bfdc180", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '147.182.140.156']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T09:31:51Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2bed4e53-aa7f-4f86-821f-454387765b64", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '147.182.143.159']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T09:10:09Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--0940cc52-aee4-4016-ab9b-dd12af22a0bd", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '123.145.11.60']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T08:53:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--694bee14-353a-4b1f-8f38-3da379fa70fa", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.227.10.97']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T08:47:40Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--570e998a-0996-46f9-8faf-dbea4ef298b7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.89.232.61']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T07:50:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--a5ac23d4-71c3-4ad6-a432-c739282e3119", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.227.0.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T07:16:31Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--2f42ec14-5ad1-4ebb-8231-f6007f45eabc", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.76.85']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T07:10:48Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--46b16482-6dc3-479c-8988-d276cec25cc7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '35.187.53.184']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T07:04:29Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--4b573956-72f4-48ef-a0fb-cb144c3a92c8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.131.94.191']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:53:37Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8933b620-6679-4bf1-bb99-a6fdb96753b9", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '178.128.150.240']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:51:25Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--85265d17-0b43-4a93-aba2-70accfdee95c", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '100.23.178.110']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:45:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--dd7e4e83-2c29-40ac-ac2b-2f3424fa18ca", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.124.52']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:40:03Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ac5de231-f18c-4593-b897-836b3b463ec7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '143.198.36.74']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:28:14Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1af4123c-403d-4125-b06d-6cedb66cefb1", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '68.183.198.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:26:21Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d504166b-f72a-4b1b-be7c-27f3bd5b2c2f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.176.111']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:25:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--6170cc5d-5107-4510-8cd3-288ac50ee65a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '45.11.230.136']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:23:47Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d6cefd53-b790-450e-9a56-3e60923fc612", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.34.134.58']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:16:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--baf4e3ba-fe83-4e99-95d4-3fd00a40d4c0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.207.91.68']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:08:33Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--c7f36b3f-5bd4-4eed-8e00-d8b0bae87e2b", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '157.230.214.193']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:08:22Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e4843022-946f-4f7f-9ee8-757648c2432d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.203.72.8']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:59:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--e365d5e7-c2e9-40bb-a10a-1cce43091574", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '64.227.1.103']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:40:10Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--fdef66c1-7dbd-4d47-82f4-14aa2dc2c66d", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '46.101.81.235']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:36:57Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--090e9edb-3759-43c9-9470-9f404fc8b2ab", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '209.97.183.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:33:02Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--576009a2-0c0b-4bfe-b80d-f49c851393bf", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '107.150.99.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:33:00Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--804f2201-2cdf-471a-8124-4963ee32bf11", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.227.197.160']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:26:46Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--88a8cd89-8b8d-4672-96c7-048f91f3cbb2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '167.99.60.50']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T05:25:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9aa304a2-1295-4579-a300-c87714db9fc7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.236.222.30']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T04:54:57Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3c127dba-c4ec-4568-9230-08b9e5010a21", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '206.81.5.220']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T04:45:39Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--91ec5747-9d88-4568-af47-4c2ecc3e5c75", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.232.101.101']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T04:10:56Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d39363bd-d3da-4099-8728-13a011dfbd4e", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '161.35.85.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:56:18Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--51aa8dd1-a01f-4a49-85c1-252ce506eb89", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '152.42.133.229']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:47:28Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b17967fb-dd92-4a13-a30c-6abeb2abee00", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '159.223.137.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:45:20Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--adbd86c8-7a0f-42cb-a06d-edeb6279b542", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '146.190.235.251']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:44:53Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--1632698f-4b5e-4f71-9995-31a074510d20", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.122.112.188']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:39:49Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--3f50c22e-649b-4242-9efa-88f2326d1200", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '137.184.130.43']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T04:59:55Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--02b73d4b-9fd7-4468-8a57-5d1caa9e46d8", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce VNC", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '195.74.67.71']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:49:34Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--76c1062c-2d38-4143-9678-d0fa5358e8e7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '207.154.240.55']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T03:04:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f0ba096b-f128-49c5-a5e0-4766ced71ba2", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '134.209.121.225']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T02:55:28Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--f1b9ab2a-ac76-402c-918a-8b1f7e72de14", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce IMAP", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '34.62.111.40']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T06:37:08Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--8f80ee4d-62aa-4306-a4f7-3ff6a8e3d890", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.68.161']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T06:14:55Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--99ed084b-145a-409a-a3c2-6bc57e221b3f", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '67.205.145.59']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T02:26:12Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ab3c89ca-f6b3-4d22-ace7-e9e637f931d4", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.248.58.86']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T02:17:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9f8810cb-3490-4535-9157-98a2da93ffc0", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Cross-site scripting", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '104.131.83.114']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T01:58:11Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--b26abb17-77ef-462d-8d3a-d5ca3a83ed6a", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '165.232.176.195']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T01:49:53Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--9b2ab8d2-e017-4ab6-8b81-a1b57d31deac", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Bruteforce POP3", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '110.179.81.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T01:08:24Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--d4c556a0-2943-4a12-83c1-9e153a2bb218", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '139.162.21.42']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T01:06:15Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--ca05bca3-c878-4e2d-9718-520e8865fe50", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "Tentative d'exploit", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '44.234.46.177']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T00:29:54Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--04dfda7f-bdbb-4f06-a9bb-d686ed950918", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '146.59.118.99']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-13T07:42:20Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] }, { "type": "indicator", "spec_version": "2.1", "id": "indicator--49dc1176-6ab7-428e-8a63-c5dabb9319f7", "created": "2026-10-18T02:42:15Z", "modified": "2026-10-18T02:42:15Z", "name": "SSRF", "description": "Bloquer en entrée. Reprendre le verdict DNSBL dans la règle ou le ticket.", "pattern": "[ipv4-addr:value = '66.249.68.167']", "pattern_type": "stix", "pattern_version": "2.1", "valid_from": "2026-10-16T14:52:29Z", "labels": [ "malicious-activity" ], "confidence": 80, "indicator_types": [ "malicious-activity" ] } ] }