{
  "Event": {
    "analysis": "1",
    "date": "2026-05-03",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-03",
    "publish_timestamp": "1777848316",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1777848315",
    "uuid": "66b89ee8-d7ca-43e4-a8a2-384296da4415",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-02T23:25:07.653782+00:00",
        "timestamp": "1777764309",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6638c713-e144-47b7-8e6c-a95485c5f0e1",
        "value": "191.96.202.54",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-02T23:25:27.559693+00:00",
        "timestamp": "1777764329",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8fb4023a-2338-4df5-9190-6a174a2630dd",
        "value": "82.26.246.126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-02T23:35:54.272801+00:00",
        "timestamp": "1777764956",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e31e8dd4-e320-4469-9421-7a3be4f49c80",
        "value": "158.94.210.233",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:38:06.524245+00:00",
        "timestamp": "1777772288",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "53d64f7f-b38e-4486-92f7-54b9fc38341d",
        "value": "49.51.132.100",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:38:17.804336+00:00",
        "timestamp": "1777772300",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d13f8894-ce93-4e80-a8dd-3f42f85184fa",
        "value": "43.160.219.206",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:40:02.099301+00:00",
        "timestamp": "1777772404",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7641a237-2c70-46a1-bae0-188c4436c2bb",
        "value": "43.165.167.72",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:43:44.972274+00:00",
        "timestamp": "1777772626",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "10db6d6f-815b-4769-a961-6cc393a4a6cf",
        "value": "43.165.198.5",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:44:42.708535+00:00",
        "timestamp": "1777772684",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4f6421b9-5576-46ae-92e0-0d67e01ed484",
        "value": "101.33.81.73",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:47:48.987684+00:00",
        "timestamp": "1777772871",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3b08b1b0-36fa-4352-820f-1fbcec66ba56",
        "value": "43.164.190.28",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:48:02.480151+00:00",
        "timestamp": "1777772884",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "508c4373-c198-4196-8a1a-8081b46564c7",
        "value": "43.164.1.211",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:50:51.136927+00:00",
        "timestamp": "1777773053",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e354ca56-d630-40c0-88bb-d18517fadb22",
        "value": "43.154.127.188",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:51:05.976417+00:00",
        "timestamp": "1777773068",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "672fd6d3-bec0-4eba-8c13-7ffb258ac0a5",
        "value": "43.161.251.162",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T01:55:50.936286+00:00",
        "timestamp": "1777773352",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6d852f07-3e16-4a15-b15e-afc7a3ccb687",
        "value": "43.162.109.249",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T06:17:18.245004+00:00",
        "timestamp": "1777789040",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ccb59154-fe43-4ae3-a176-3bcce980e686",
        "value": "181.214.32.22",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:09:02.716506+00:00",
        "timestamp": "1777792144",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8e33e5bf-4e23-47ed-8dc6-7728b4ff9789",
        "value": "43.160.240.216",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:09:27.023441+00:00",
        "timestamp": "1777792168",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d54528dc-45b0-4c9b-b982-ee89eb9de569",
        "value": "43.164.3.23",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:13:25.916717+00:00",
        "timestamp": "1777792407",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "36385cb9-b51e-4c2a-a096-46e220b3278b",
        "value": "43.163.104.54",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:16:03.143072+00:00",
        "timestamp": "1777792564",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "17485169-d689-4ff8-9032-27f7daf21ac6",
        "value": "173.239.237.129",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:19:25.881553+00:00",
        "timestamp": "1777792768",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d662cd10-8f90-412f-a8b4-77bd2622c619",
        "value": "43.164.133.138",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:19:51.963911+00:00",
        "timestamp": "1777792793",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0d5b6eec-240a-4e86-a92a-e534a905d44c",
        "value": "43.166.128.86",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:20:31.175956+00:00",
        "timestamp": "1777792833",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b3b948b3-f58a-49db-a40c-56f77b0c6e90",
        "value": "43.160.219.138",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:22:50.064759+00:00",
        "timestamp": "1777792971",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f6b1dd95-ba5b-4691-9358-0bd52e2a53bb",
        "value": "43.165.195.234",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:25:05.956615+00:00",
        "timestamp": "1777793107",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "a9c10cda-d6c0-41f7-8dd2-269bbaf7cca7",
        "value": "43.130.72.40",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:25:44.288524+00:00",
        "timestamp": "1777793146",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8c6d1529-5c70-4eda-acd1-9780f456bf87",
        "value": "43.165.7.74",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:29:02.943837+00:00",
        "timestamp": "1777793344",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "66d61048-73dd-4394-9fed-03baa666f0fe",
        "value": "43.165.67.31",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:29:35.937086+00:00",
        "timestamp": "1777793377",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "301b2b44-8cd9-44b3-b066-1136cb3a9912",
        "value": "101.32.49.171",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN SFTP/FTP Password Exposure via sftp-config.json",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T07:45:32.626761+00:00",
        "timestamp": "1777794334",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "705f2107-329f-42c4-be47-39b4413b648f",
        "value": "206.189.36.107",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T09:21:44.695767+00:00",
        "timestamp": "1777800106",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0d2bfcb9-be6b-4c01-8156-21b598f7e2ca",
        "value": "107.173.182.147",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T09:35:09.730326+00:00",
        "timestamp": "1777800911",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b8cef338-7ffb-4b30-b376-03bb6ed7bb59",
        "value": "107.175.93.145",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious Empty User-Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T11:07:14.802913+00:00",
        "timestamp": "1777806436",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0c8b209c-6088-41ef-b63b-528bfd1d25ee",
        "value": "216.73.217.71",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:09:08.480183+00:00",
        "timestamp": "1777810150",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7ac6395a-4484-456d-9800-c8096b9586db",
        "value": "43.160.225.169",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:12:04.486005+00:00",
        "timestamp": "1777810326",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4a99fbb0-ce89-45dc-9cc9-e17fca96e2a8",
        "value": "43.153.192.98",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:12:28.119912+00:00",
        "timestamp": "1777810350",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0dbf7885-94db-401f-8a7d-46f9f1dcd469",
        "value": "43.165.198.224",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:13:44.410442+00:00",
        "timestamp": "1777810427",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2d4e48b0-ff35-45db-a0e1-7b831db52d34",
        "value": "43.164.129.191",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:15:36.153671+00:00",
        "timestamp": "1777810537",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "50850010-07e9-4dc3-9b05-ca62898a01d5",
        "value": "43.164.0.96",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:16:25.685508+00:00",
        "timestamp": "1777810587",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f19c7b03-d187-4550-81b1-9e0aa4273249",
        "value": "43.135.115.233",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:20:08.809605+00:00",
        "timestamp": "1777810811",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ec6f406f-5a89-41be-a1fc-236237cfa93d",
        "value": "43.164.3.182",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:29:59.550329+00:00",
        "timestamp": "1777811401",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b94298cc-e843-4452-b93f-51983d0eaf45",
        "value": "43.165.126.130",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T12:30:44.656396+00:00",
        "timestamp": "1777811446",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "381dc19d-4ff4-4f03-8472-4e18c0e04a68",
        "value": "43.165.2.110",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T16:59:28.435708+00:00",
        "timestamp": "1777827569",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b2b276b3-dc25-4ed0-8466-8b03f3da43d1",
        "value": "159.89.207.113",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T17:30:10.814085+00:00",
        "timestamp": "1777829412",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ef80d329-1006-411b-ae7c-c1a5e6762df0",
        "value": "2400:6180:0:d2:0:2:d204:5000",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T17:48:00.587423+00:00",
        "timestamp": "1777830482",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f71c3e9f-0454-4783-9555-94a3ffee1bc9",
        "value": "23.94.138.223",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T17:48:22.727096+00:00",
        "timestamp": "1777830504",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ee0e40a5-bfdb-4c2f-b99b-90580d28cafd",
        "value": "45.56.173.7",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T17:48:29.140227+00:00",
        "timestamp": "1777830510",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9dcdb893-82ec-4d2e-8402-87dcd81e5c4c",
        "value": "107.174.194.126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T18:22:44.626426+00:00",
        "timestamp": "1777832566",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "895f5966-edd8-4391-af8a-323e339d3d6d",
        "value": "92.119.182.245",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T18:22:58.215368+00:00",
        "timestamp": "1777832580",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2c099042-e664-4a45-be9b-58cf3524d8e4",
        "value": "104.252.107.63",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T18:23:02.157322+00:00",
        "timestamp": "1777832584",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ae892df7-c2a9-45b2-879d-f2dadf71215c",
        "value": "136.0.105.170",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T18:54:38.253750+00:00",
        "timestamp": "1777834480",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d6b4b87e-33cd-4cb9-94d4-41eef961edc5",
        "value": "54.89.140.32",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:24:00.648989+00:00",
        "timestamp": "1777847042",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "227ae178-9d32-41e3-aea0-91eed513c8aa",
        "value": "43.162.103.165",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:30:56.338258+00:00",
        "timestamp": "1777847457",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ac4f3706-c3a4-48bc-bbb9-ea0e92e070e7",
        "value": "43.165.7.132",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:35:33.682907+00:00",
        "timestamp": "1777847735",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "cb9fbc7c-c47a-4910-ad86-f7a325b353f1",
        "value": "43.165.127.225",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:36:36.228740+00:00",
        "timestamp": "1777847797",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "75171f47-1480-4eda-aec3-ca9016d5ee1f",
        "value": "49.51.166.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:40:06.004518+00:00",
        "timestamp": "1777848007",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "93c0dd96-15a8-4274-bfd2-c714b5f52cb9",
        "value": "43.164.192.151",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:43:21.638172+00:00",
        "timestamp": "1777848203",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "03d2ae2e-215a-4747-9a64-ec23f56f9772",
        "value": "43.153.204.189",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-03T22:45:14.324879+00:00",
        "timestamp": "1777848315",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0043d998-8c00-43ee-af7b-8ce3b5ce6b9a",
        "value": "43.135.211.148",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}