{"Event":{"uuid":"4fa65206-a611-5f84-b386-b5251eec98f6","info":"hexfield honeypot mass-scanner blocklist","date":"2026-08-19","threat_level_id":"2","analysis":"2","published":true,"Orgc":{"name":"hexfield","uuid":"18bc2050-8e7a-5fcc-a6d4-da29c847d548"},"Tag":[{"name":"type:OSINT"},{"name":"tlp:white"},{"name":"hexfield:honeypot-mass-scanner"},{"name":"hexfield:feed=\"public\""},{"name":"hexfield:source=\"honeypot\""},{"name":"misp-galaxy:mitre-attack-pattern=\"T1086\""},{"name":"misp-galaxy:mitre-attack-pattern=\"T1133\""}],"Attribute":[{"uuid":"954c90e1-baff-5efb-b59a-b787b0bf7f91","type":"url","category":"Payload delivery","to_ids":true,"value":"http://146.56.180.42:3333/","comment":"hexfield conf=48 vt=3 boxes=1 hits=1 type=url","first_seen":"2026-06-16","last_seen":"2026-06-16","Tag":[{"name":"hexfield:confidence=\"low\""},{"name":"hexfield:confidence-score=\"48\""},{"name":"hexfield:indicator-type=\"url\""},{"name":"hexfield:source=\"honeypot\""},{"name":"hexfield:malware-payload"}]},{"uuid":"d886fa1c-793b-5a49-bf15-7cb78f5f2128","type":"url","category":"Payload delivery","to_ids":true,"value":"https://14.46.136.77/sh","comment":"hexfield conf=69 vt=16 boxes=1 hits=1 type=url","first_seen":"2026-06-13","last_seen":"2026-06-13","Tag":[{"name":"hexfield:confidence=\"medium\""},{"name":"hexfield:confidence-score=\"69\""},{"name":"hexfield:indicator-type=\"url\""},{"name":"hexfield:source=\"honeypot\""},{"name":"hexfield:malware-payload"}]},{"uuid":"9ec661cf-af8b-58a4-a2d0-33f9966d9e35","type":"url","category":"Payload delivery","to_ids":true,"value":"https://217.60.195.113/sh","comment":"hexfield conf=82 vt=14 boxes=6 hits=16 type=url","first_seen":"2026-06-13","last_seen":"2026-06-16","Tag":[{"name":"hexfield:confidence=\"high\""},{"name":"hexfield:confidence-score=\"82\""},{"name":"hexfield:indicator-type=\"url\""},{"name":"hexfield:source=\"honeypot\""},{"name":"hexfield:malware-payload"}]},{"uuid":"043df365-c44e-50e5-8d76-22f4198d8e34","type":"url","category":"Payload delivery","to_ids":true,"value":"https://217.60.195.113/sh)","comment":"hexfield conf=74 vt=11 boxes=5 hits=14 type=url","first_seen":"2026-06-13","last_seen":"2026-06-16","Tag":[{"name":"hexfield:confidence=\"medium\""},{"name":"hexfield:confidence-score=\"74\""},{"name":"hexfield:indicator-type=\"url\""},{"name":"hexfield:source=\"honeypot\""},{"name":"hexfield:malware-payload"}]}]}}