{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/f5-confluence-edge-identity-attack-path/",
    "fang": "live",
    "exported_at": "2026-07-15T22:31:12Z",
    "total": 13,
    "categories": 5
  },
  "iocs": {
    "IPv4": [
      "206.189.27.39"
    ],
    "Domains": [
      "my.f5.com",
      "www.darktrace.com"
    ],
    "URLs": [
      "http://206.189.27.39:8888/5",
      "https://my.f5.com/manage/s/article/K000156741",
      "https://www.darktrace.com/blog/darktraces-view-on-operation-lunar-peek-exploitation-of-palo-alto-firewall-devices-cve-2024-2012-and-2024-9474"
    ],
    "sha256": [
      "4a927d031919fd6bd88d3c8a917214b54bca00f8ddc80ecfe4d230663dda7465",
      "57b3188e24782c27fdf72493ce599537efd3187d03b80f8afe733c72d68c5517",
      "710a9d2653c8bd3689e451778dab9daec0de4c4c75f900788ccf23ef254b122a",
      "b4592cea69699b2c0737d4e19cff7dca17b5baf5a238cd6da950a37e9986f216",
      "bdd5da81ac34d9faa2a5118d4ed8f492239734be02146cd24a0e34270a48a455"
    ],
    "CVEs": [
      "CVE-2025-33073",
      "CVE-2025-53521"
    ]
  }
}