{
  "Event": {
    "analysis": "1",
    "date": "2026-05-05",
    "extends_uuid": "",
    "info": "[Threat Intel] Iranian-Nexus Operation Against Oman's Government: 12 Ministries Hit and 26,000 Citizen Records Exposed",
    "protected": false,
    "publish_timestamp": "1779546546",
    "published": true,
    "threat_level_id": "2",
    "timestamp": "1779546545",
    "uuid": "1d22e8ac-9b2e-42be-8bcc-f3e462b6f63a",
    "Orgc": {
      "name": "Rectifyq",
      "uuid": "cd9bd516-61fa-476b-980f-2f8de03992d4"
    },
    "Tag": [
      {
        "colour": "#cf6788",
        "local": false,
        "name": "misp-galaxy:producer=\"Hunt.io\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"none-from-src\"",
        "relationship_type": ""
      },
      {
        "colour": "#b94b1d",
        "local": false,
        "name": "rectifyq:mitre-att&ck=\"from-OTX\"",
        "relationship_type": ""
      },
      {
        "colour": "#705cef",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Scheduled Task - T1053.005\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Password Guessing - T1110.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#7773ac",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"External Remote Services - T1133\"",
        "relationship_type": ""
      },
      {
        "colour": "#d74cce",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Bypass User Account Control - T1548.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#8efd0f",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Security Account Manager - T1003.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Domain Account - T1087.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#5c57c8",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Windows Service - T1543.003\"",
        "relationship_type": ""
      },
      {
        "colour": "#fcc86e",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Remote Data Staging - T1074.002\"",
        "relationship_type": ""
      },
      {
        "colour": "#9feaf0",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exploit Public-Facing Application - T1190\"",
        "relationship_type": ""
      },
      {
        "colour": "#bce57a",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over Web Service - T1567\"",
        "relationship_type": ""
      },
      {
        "colour": "#657ac3",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Protocol Tunneling - T1572\"",
        "relationship_type": ""
      },
      {
        "colour": "#fe1ef0",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Shell - T1505.003\"",
        "relationship_type": ""
      },
      {
        "colour": "#adf1b0",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Proxy - T1090\"",
        "relationship_type": ""
      },
      {
        "colour": "#0c0051",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"File and Directory Discovery - T1083\"",
        "relationship_type": ""
      },
      {
        "colour": "#f95f85",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Credentials In Files - T1552.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#a9f8b1",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Exfiltration Over C2 Channel - T1041\"",
        "relationship_type": ""
      },
      {
        "colour": "#755c09",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"PowerShell - T1059.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#71ecdb",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Account Manipulation - T1098\"",
        "relationship_type": ""
      },
      {
        "colour": "#59699c",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Valid Accounts - T1078\"",
        "relationship_type": ""
      },
      {
        "colour": "#02475d",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Windows Command Shell - T1059.003\"",
        "relationship_type": ""
      },
      {
        "colour": "#92e858",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Web Protocols - T1071.001\"",
        "relationship_type": ""
      },
      {
        "colour": "#f055aa",
        "local": false,
        "name": "misp-galaxy:mitre-attack-pattern=\"Create Account - T1136\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:country=\"iran\"",
        "relationship_type": ""
      },
      {
        "colour": "#13bb3c",
        "local": false,
        "name": "misp-galaxy:target-information=\"Oman\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:sector=\"Government, Administration\"",
        "relationship_type": ""
      },
      {
        "colour": "#49a260",
        "local": false,
        "name": "rectifyq:category=\"threat\"",
        "relationship_type": ""
      },
      {
        "colour": "#120046",
        "local": false,
        "name": "rectifyq:sub-category=\"infra-profile\"",
        "relationship_type": ""
      },
      {
        "colour": "#f1dfed",
        "local": false,
        "name": "rectifyq:TA-category=\"APT\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffd12e",
        "local": false,
        "name": "rectifyq:target=\"broad-based\"",
        "relationship_type": ""
      },
      {
        "colour": "#31373d",
        "local": false,
        "name": "rectifyq:MY-relevancy=\"not-relevant\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:threat-actor=\"MuddyWater\"",
        "relationship_type": ""
      },
      {
        "colour": "#0088cc",
        "local": false,
        "name": "misp-galaxy:threat-actor=\"OilRig\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
        "relationship_type": ""
      },
      {
        "colour": "#626567",
        "local": false,
        "name": "rectifyq:no-samples-in=\"Tria.ge\"",
        "relationship_type": ""
      },
      {
        "colour": "#3800d9",
        "local": false,
        "name": "rectifyq:action-taken=\"VT-comment\"",
        "relationship_type": ""
      },
      {
        "colour": "#3d00e9",
        "local": false,
        "name": "rectifyq:action-taken=\"telegram\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778065206",
        "to_ids": false,
        "type": "link",
        "uuid": "d87ce8b7-beee-4a5b-83da-3e5eec53af7a",
        "value": "https://hunt.io/blog/iranian-nexus-oman-government-intrusion"
      },
      {
        "category": "Other",
        "comment": "Description",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778065206",
        "to_ids": false,
        "type": "text",
        "uuid": "194f8acc-1c2b-4a11-8eab-a97a92c81267",
        "value": "An exposed command and control server on RouterHosting infrastructure revealed an active Iranian-nexus intrusion campaign targeting twelve Omani government ministries. The operation primarily focused on the Ministry of Justice and Legal Affairs, deploying custom webshells that provided persistent access through April 2026. Over 26,000 user records containing judicial case data, committee decisions, and registry hives were exfiltrated. The attacker utilized ProxyShell exploits, DotNetNuke vulnerabilities, and custom Python scripts targeting Exchange servers, SQL databases, and Oracle systems. Infrastructure analysis revealed connections to spoofed Iranian diaspora media and censorship circumvention tools, with tactical overlaps indicating MOIS-linked groups such as APT34 and MuddyWater. The campaign specifically targeted judicial records, immigration systems, and citizen identity data across multiple government entities."
      },
      {
        "category": "Other",
        "comment": "Summary",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778065206",
        "to_ids": false,
        "type": "text",
        "uuid": "26a46a19-f7bf-4fe4-9854-9672a9dcb830",
        "value": "Name: Iranian-Nexus Operation Against Oman's Government: 12 Ministries Hit and 26,000 Citizen Records Exposed\nAuthor: AlienVault\nAdversary: \nTags: [\"proxyshell\", \"apt34\", \"iranian-nexus\", \"dotnetnuke\"]\nTgtd countries: []\nMlwr families: [\"Chisel\", \"GodPotato\"]\nAttack_ids: [\"T1053.005\", \"T1110.001\", \"T1133\", \"T1548.002\", \"T1003.002\", \"T1087.002\", \"T1543.003\", \"T1074.002\", \"T1190\", \"T1567\", \"T1572\", \"T1505.003\", \"T1090\", \"T1083\", \"T1552.001\", \"T1041\", \"T1059.001\", \"T1098\", \"T1078\", \"T1059.003\", \"T1071.001\", \"T1136\"]\nIndustries: [\"Government\"]"
      },
      {
        "category": "Payload delivery",
        "comment": "No sample in VT\r\nLast check:16/05/2026",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1779546545",
        "to_ids": true,
        "type": "sha256",
        "uuid": "3ccc1088-6939-40bb-a362-c35cf97d5d69",
        "value": "ecc3611f7dcbaa53acf44e67de2f10d78a26e03b3c77ba28bbd3ee16b2e66437",
        "Tag": [
          {
            "colour": "#260091",
            "local": false,
            "name": "rectifyq:ioc=\"enriched\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"VirusTotal\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"Tria.ge\"",
            "relationship_type": ""
          },
          {
            "colour": "#626567",
            "local": false,
            "name": "rectifyq:no-samples-in=\"MalwareBazaar\"",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898624",
        "to_ids": true,
        "type": "domain",
        "uuid": "a38260ad-1793-4725-a5e8-fc70051c7a9a",
        "value": "brnettlix.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898646",
        "to_ids": true,
        "type": "domain",
        "uuid": "b6af1774-6909-407a-83cd-1699a44499ee",
        "value": "brttfrixx.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898667",
        "to_ids": true,
        "type": "domain",
        "uuid": "fa1b5777-99c4-4209-96b0-feda3c2963bf",
        "value": "identificara.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898688",
        "to_ids": true,
        "type": "domain",
        "uuid": "d3feb932-1d1e-42a7-80be-61ca227c557b",
        "value": "mjla.gov.om",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898709",
        "to_ids": true,
        "type": "domain",
        "uuid": "fe7dd801-a852-47d2-bfe5-b0921a5f6427",
        "value": "realprimefix.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898731",
        "to_ids": true,
        "type": "domain",
        "uuid": "54170b54-fdd3-4c0d-b558-5b44cdc7b2d5",
        "value": "regorixa.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898752",
        "to_ids": true,
        "type": "domain",
        "uuid": "90ba3b25-86ac-4191-886e-72c9bbc60771",
        "value": "sailms.gov.om",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898773",
        "to_ids": true,
        "type": "domain",
        "uuid": "e7aab500-099e-45cb-a737-7bc39a67a747",
        "value": "suanefllix.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898794",
        "to_ids": true,
        "type": "domain",
        "uuid": "11673936-8270-4f48-9c5e-d6e0c95b26a0",
        "value": "vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898816",
        "to_ids": true,
        "type": "hostname",
        "uuid": "070cb412-f4c3-4350-ae08-e42fff88e283",
        "value": "dubai-1.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898837",
        "to_ids": true,
        "type": "hostname",
        "uuid": "cda6972d-58fa-4545-a048-b9844375b0d5",
        "value": "dubai-10.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898858",
        "to_ids": true,
        "type": "hostname",
        "uuid": "6404671c-de60-4a95-ae24-5195a22d158c",
        "value": "dubai-2.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898879",
        "to_ids": true,
        "type": "hostname",
        "uuid": "3448e442-74c5-4e7c-a8da-d4c2b5291dbb",
        "value": "dubai-3.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898900",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f06bbe82-984d-47fe-bde1-b054fb97594b",
        "value": "dubai-4.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898921",
        "to_ids": true,
        "type": "hostname",
        "uuid": "7026d526-f454-4df9-bd45-ceba26691357",
        "value": "dubai-5.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898942",
        "to_ids": true,
        "type": "hostname",
        "uuid": "df9389b7-9b2e-4563-bdb0-42084e6e7b2a",
        "value": "dubai-6.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898964",
        "to_ids": true,
        "type": "hostname",
        "uuid": "fca899bb-c1db-4a48-93f6-cc93b784b3b3",
        "value": "dubai-7.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778898985",
        "to_ids": true,
        "type": "hostname",
        "uuid": "5fa034cf-c2f4-4aae-a0c7-b364d6ca7f56",
        "value": "dubai-8.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899006",
        "to_ids": true,
        "type": "hostname",
        "uuid": "8de7f649-a786-4d9a-a8f8-aef6a2afbae8",
        "value": "dubai-9.vaermb.com",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899027",
        "to_ids": true,
        "type": "hostname",
        "uuid": "6500ec1d-e534-4059-955e-129e043856d3",
        "value": "email.taxoman.gov.om",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899048",
        "to_ids": true,
        "type": "hostname",
        "uuid": "4b02a3af-6340-4959-af8b-5e51e9adb98f",
        "value": "mail.rfo.gov.om",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899069",
        "to_ids": true,
        "type": "hostname",
        "uuid": "47b4366a-17f6-433a-8ecc-4b27256c5271",
        "value": "mersaltest.mjla.gov.om",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899090",
        "to_ids": true,
        "type": "hostname",
        "uuid": "f460e50d-f83f-4460-9696-6b3317485d6d",
        "value": "myjitsi.exceptionnotfound.ir",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899111",
        "to_ids": true,
        "type": "hostname",
        "uuid": "7cb423f3-14d1-4093-9b23-1f583d6a9429",
        "value": "myjitsi.mrnajafipour.ir",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899132",
        "to_ids": true,
        "type": "hostname",
        "uuid": "47df44d3-efb1-49e9-a4b8-dbf73f9c49f7",
        "value": "price.exceptionnotfound.ir",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899154",
        "to_ids": true,
        "type": "hostname",
        "uuid": "59d12517-68f0-490d-ad07-5b0ded44c818",
        "value": "s5.sideliner.ir",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899176",
        "to_ids": true,
        "type": "hostname",
        "uuid": "e29a24c9-2613-4c52-a23a-94b9d2a497b1",
        "value": "shop.exceptionnotfound.ir",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899197",
        "to_ids": true,
        "type": "hostname",
        "uuid": "974f15a9-dbb0-4b07-9858-4d9b743d9b7b",
        "value": "tools.exceptionnotfound.ir",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899218",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "c6093e6e-ea55-441e-9e34-9727c9112195",
        "value": "172.86.76.101",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899240",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e34dde3a-ccfc-472d-a31b-d35b87fc4dee",
        "value": "172.86.76.94",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899261",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "14145425-102b-438d-8795-38f77e1b25e9",
        "value": "172.86.76.108",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899282",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "ddc5c6fa-c5f9-427f-a4ef-33456ecf8f24",
        "value": "172.86.76.112",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899303",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e0f839ac-8c28-4a10-89cd-3f371eda52b7",
        "value": "172.86.76.120",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899324",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1723220d-3c86-47a2-ab9f-e019ce01395e",
        "value": "172.86.76.121",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899345",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "20879696-7ccd-434a-aa4a-9a626941f08b",
        "value": "172.86.76.124",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899367",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "9ea310f1-1b9a-4e89-a4ac-20dfa2d72272",
        "value": "172.86.76.129",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899388",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "1a0fc2d8-b5cf-48af-b872-01319ccdd3bd",
        "value": "172.86.76.130",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899409",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "e457336f-f9bf-4261-9701-37ad929d6c48",
        "value": "45.59.114.60",
        "Tag": [
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899430",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "f3f55312-5e20-483d-bf42-7bfa5a86273c",
        "value": "104.21.27.95",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778899451",
        "to_ids": true,
        "type": "ip-dst",
        "uuid": "fa92f6d6-89dd-4eb6-a9ff-a27dddbe77d0",
        "value": "172.67.142.35",
        "Tag": [
          {
            "colour": "#2c2142",
            "local": false,
            "name": "false-positive:risk=\"high\"",
            "relationship_type": ""
          },
          {
            "colour": "#342294",
            "local": false,
            "name": "CommentAdded",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778893057",
        "to_ids": false,
        "type": "vulnerability",
        "uuid": "6e02c79b-09d0-4683-ae06-8a8d877368f1",
        "value": "CVE-2021-34473"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778893057",
        "to_ids": false,
        "type": "vulnerability",
        "uuid": "5e167e12-c0a7-4c25-81c7-38e4633ce381",
        "value": "CVE-2021-31207"
      },
      {
        "category": "External analysis",
        "comment": "",
        "deleted": false,
        "disable_correlation": false,
        "timestamp": "1778893068",
        "to_ids": false,
        "type": "vulnerability",
        "uuid": "b6221038-62e9-4b0d-a9de-9f362fd1f1e0",
        "value": "CVE-2021-34523"
      }
    ]
  }
}