{
  "Event": {
    "analysis": "1",
    "date": "2026-05-08",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-08",
    "publish_timestamp": "1778272186",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1778272181",
    "uuid": "7340f95b-bdcb-4bc1-826e-954acdfe755a",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T23:16:38.976877+00:00",
        "timestamp": "1778195800",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e9ec3408-2879-4895-8401-415947a569ea",
        "value": "4.227.176.58",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T23:23:54.960904+00:00",
        "timestamp": "1778196237",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ed1878a7-6a5c-43f4-9aab-d1710a0bdf58",
        "value": "89.249.195.18",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T23:25:17.244840+00:00",
        "timestamp": "1778196319",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9b4edfe5-3532-49ea-a4e5-299b87176e15",
        "value": "104.239.41.28",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-07T23:25:39.183107+00:00",
        "timestamp": "1778196340",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "28d1f84b-f31c-4ab9-b732-cb8488ab6ff1",
        "value": "92.113.119.138",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T00:46:13.282909+00:00",
        "timestamp": "1778201175",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1e6d865b-191b-42ff-8be6-82cc8027b9cc",
        "value": "150.109.46.88",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T00:52:37.166276+00:00",
        "timestamp": "1778201559",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d1bb4623-b1d6-4aab-b6a9-ffbae10a3386",
        "value": "2001:470:1:fb5::200",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T01:24:10.039844+00:00",
        "timestamp": "1778203451",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c0b3821f-3947-4a21-b67d-c50ce66e9840",
        "value": "43.157.175.122",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T01:40:39.183042+00:00",
        "timestamp": "1778204440",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "dfc5583b-f865-4a2c-a233-7944447f9991",
        "value": "2001:470:1:332::37",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T01:44:31.619595+00:00",
        "timestamp": "1778204673",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "cd19185d-273d-4ecd-9013-6b3f3b7e7c59",
        "value": "43.157.67.70",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T01:52:26.634157+00:00",
        "timestamp": "1778205148",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ab728a7e-2770-48e8-bf92-746b2c09307c",
        "value": "119.28.89.249",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T01:58:56.394762+00:00",
        "timestamp": "1778205537",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "68b05356-3f75-4cc4-bd23-514be6030322",
        "value": "43.153.62.161",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T02:01:43.694168+00:00",
        "timestamp": "1778205705",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d5cc408f-854b-473a-964c-927dd8bfa47e",
        "value": "43.154.140.188",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T02:04:12.304685+00:00",
        "timestamp": "1778205854",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5828b7f2-4111-4276-98b0-c083b43fd7f3",
        "value": "101.33.80.42",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T03:09:32.723578+00:00",
        "timestamp": "1778209774",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b87cf6e9-1580-4638-8d31-9aaf0441a68e",
        "value": "82.22.230.25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T03:30:46.177720+00:00",
        "timestamp": "1778211048",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "56deb57c-e92c-4035-8115-4468dd8e4123",
        "value": "82.25.215.16",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T04:22:38.403194+00:00",
        "timestamp": "1778214159",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9d18e6f1-dc9d-4a98-a3d9-f22a195019fe",
        "value": "2.57.31.243",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T04:22:50.921836+00:00",
        "timestamp": "1778214172",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "812c42f4-fb98-45e0-955c-074f01703168",
        "value": "82.24.239.55",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T04:22:54.656908+00:00",
        "timestamp": "1778214176",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2e97a0ca-3975-4540-907c-26aed7d341b7",
        "value": "216.173.74.75",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T04:32:04.474240+00:00",
        "timestamp": "1778214726",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d122df40-4376-47b5-87cd-d5da648443c3",
        "value": "125.209.235.168",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T05:17:06.951358+00:00",
        "timestamp": "1778217428",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d28af99b-70d0-412d-8c1a-43f62a7a5968",
        "value": "82.24.238.82",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T05:17:20.469321+00:00",
        "timestamp": "1778217442",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f25e42ac-039b-49a6-949c-bb25c8dc1042",
        "value": "94.46.206.101",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T05:37:10.065873+00:00",
        "timestamp": "1778218631",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3fc9e643-448d-433e-91fa-a8f92fbc4418",
        "value": "64.137.59.96",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T05:37:22.766849+00:00",
        "timestamp": "1778218644",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "37321157-a589-4e9c-ab16-112c259b96a8",
        "value": "82.22.245.55",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:25:09.779347+00:00",
        "timestamp": "1778221511",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "508e0750-1817-4b43-8c22-23db4c850d84",
        "value": "125.209.235.182",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:25:13.878617+00:00",
        "timestamp": "1778221515",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "685a9380-f4ff-43c2-a3cc-9beb6f30dc05",
        "value": "110.93.150.86",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:27:34.895135+00:00",
        "timestamp": "1778221656",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8fa1ccb7-185e-447a-b408-47a8e39ac3f6",
        "value": "82.24.238.103",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:27:42.674495+00:00",
        "timestamp": "1778221664",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "04f5d371-0530-4416-b8f3-d21b669ede35",
        "value": "204.217.245.18",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:27:50.828773+00:00",
        "timestamp": "1778221672",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3a23b9d5-41c6-44cf-a43d-e7faa4fdda45",
        "value": "82.21.226.4",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:28:02.662749+00:00",
        "timestamp": "1778221684",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1511ac40-6197-42cd-a37e-24ebf4a441f9",
        "value": "91.124.253.243",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:28:07.446972+00:00",
        "timestamp": "1778221688",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4c874455-432e-4ad4-959f-c424c53926b0",
        "value": "152.232.81.213",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T06:28:19.192518+00:00",
        "timestamp": "1778221700",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "86038b8a-89a1-4da3-b71c-a34fb13174d1",
        "value": "216.173.80.191",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:16:18.273703+00:00",
        "timestamp": "1778224579",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "95e19049-5350-441e-bfba-7457f186df20",
        "value": "43.166.226.57",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:18:29.763048+00:00",
        "timestamp": "1778224711",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f0915db6-af7f-40f0-8dd3-6c22d1373588",
        "value": "43.132.214.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:20:17.196410+00:00",
        "timestamp": "1778224819",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "528db4d7-21c4-4b69-9b08-156265ec4682",
        "value": "129.226.174.80",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:20:30.995628+00:00",
        "timestamp": "1778224832",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c50a58d7-6ad6-4d86-880f-f279e7aa1249",
        "value": "104.233.20.218",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:22:35.462130+00:00",
        "timestamp": "1778224957",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "23fda7d2-40ee-40a3-8476-42e96239e1d9",
        "value": "43.157.191.20",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:25:47.477692+00:00",
        "timestamp": "1778225149",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "04cd383b-b418-4e26-a26b-58bca22cd3f8",
        "value": "43.131.23.154",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:38:29.940895+00:00",
        "timestamp": "1778225912",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0f3baee5-3842-4a39-94c7-36225ee68d47",
        "value": "142.147.245.128",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:42:47.376812+00:00",
        "timestamp": "1778226169",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "89ca2b56-42f1-48b6-a42c-f2b280b21587",
        "value": "49.51.243.95",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:43:38.502010+00:00",
        "timestamp": "1778226220",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "447a6ce5-2aa7-4d4e-b47e-21d7cb244acb",
        "value": "148.135.151.126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:43:46.512463+00:00",
        "timestamp": "1778226228",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b5c8a551-f319-4019-b509-e9e60c247ac2",
        "value": "92.112.95.196",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:43:55.779425+00:00",
        "timestamp": "1778226237",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8087cec4-2515-4bb7-bc33-5634fe584839",
        "value": "45.39.35.84",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:49:25.724990+00:00",
        "timestamp": "1778226568",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5f14e769-5f1c-4455-84d7-b95b2d0f328e",
        "value": "161.123.209.242",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:49:37.987489+00:00",
        "timestamp": "1778226580",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "93802819-bc8a-47ef-b265-6abf059579e6",
        "value": "193.187.115.132",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:49:47.211428+00:00",
        "timestamp": "1778226589",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "75d91668-c64e-4e64-b143-9def4c5fdaa8",
        "value": "82.24.221.58",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:54:40.064096+00:00",
        "timestamp": "1778226882",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "cebf0ec6-17a1-4a79-9be4-1e252500538f",
        "value": "103.114.58.50",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:54:48.595826+00:00",
        "timestamp": "1778226890",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "51aa29c6-47a3-431c-bb4d-d035e53b4a75",
        "value": "154.6.126.219",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T07:56:51.713767+00:00",
        "timestamp": "1778227013",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "07c5ada4-285f-45be-85df-9fafa8052c36",
        "value": "140.99.201.118",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "TGI HUNT eval( in HTTP Client Body",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T08:12:05.923711+00:00",
        "timestamp": "1778227927",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "658cf6a6-eafc-424d-b611-1c7202e42817",
        "value": "103.215.75.70",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T08:13:55.861193+00:00",
        "timestamp": "1778228037",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "34eb37f3-f64f-4315-835d-7fbc1b0d94f6",
        "value": "45.39.17.189",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T08:28:36.585613+00:00",
        "timestamp": "1778228918",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f2a283f9-14fe-4e8f-b209-e44721ea99ac",
        "value": "82.27.247.241",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T08:46:38.749690+00:00",
        "timestamp": "1778230000",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "00138d4a-fea7-40a0-be85-48fd41b4fb71",
        "value": "82.21.249.23",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T10:01:19.015680+00:00",
        "timestamp": "1778234480",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e268e508-9f5c-417b-8d51-9991d090e317",
        "value": "161.123.65.56",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T10:03:49.659264+00:00",
        "timestamp": "1778234631",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4927e35a-eb03-46c1-9729-2bd96c88f22b",
        "value": "45.61.124.246",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T10:27:19.354731+00:00",
        "timestamp": "1778236040",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e621f6ef-8260-416d-8bd9-a32c534eb1c7",
        "value": "192.186.151.49",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T10:27:29.721393+00:00",
        "timestamp": "1778236052",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d0eca23d-c35e-45fd-8dee-34e8996e34a6",
        "value": "64.188.120.72",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T10:27:41.410065+00:00",
        "timestamp": "1778236062",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fd70ee24-85f4-4f72-9dc2-ce5f9fa1c990",
        "value": "154.73.250.152",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T11:06:33.139091+00:00",
        "timestamp": "1778238394",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "18cc5852-5f10-47b1-8316-e951eb66edb8",
        "value": "92.113.232.195",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T12:19:56.064154+00:00",
        "timestamp": "1778242798",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "51a37bc4-9ba2-4206-9db6-237c81096ee8",
        "value": "170.106.35.137",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T12:20:48.704363+00:00",
        "timestamp": "1778242851",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fb25940c-8562-48f7-bda0-ec2a901034cd",
        "value": "43.155.157.239",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T12:24:27.458568+00:00",
        "timestamp": "1778243070",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ac3d2f1a-5c0b-418b-aecc-b2a401127aa7",
        "value": "43.135.36.201",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T12:30:52.588077+00:00",
        "timestamp": "1778243454",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bebba331-3317-44cc-8302-d8a165bf0c3c",
        "value": "101.32.15.141",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T12:32:13.447387+00:00",
        "timestamp": "1778243536",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "99868340-101a-4f5a-889c-30b726f7970a",
        "value": "43.153.26.165",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T13:04:24.092233+00:00",
        "timestamp": "1778245466",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bfa42ab7-5241-40c1-88ae-d03c981c3d0b",
        "value": "45.67.0.12",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T13:04:44.785880+00:00",
        "timestamp": "1778245486",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5462f602-d1b2-40e3-aa0d-68e65eedd20b",
        "value": "46.203.226.80",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T13:55:01.161937+00:00",
        "timestamp": "1778248502",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7c510e8d-28cd-4f92-9454-27d52c99bc9e",
        "value": "5.255.107.74",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T14:53:29.597767+00:00",
        "timestamp": "1778252011",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f4a4ba9b-5381-46e5-aae9-e8a19064410a",
        "value": "5.255.121.29",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T15:14:12.820828+00:00",
        "timestamp": "1778253255",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5ffab416-e44b-4be9-8d3b-c9035e18f5e2",
        "value": "43.157.22.109",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T15:20:10.825622+00:00",
        "timestamp": "1778253613",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3827d523-f3bc-43eb-9fa2-a1b793f54b8c",
        "value": "136.0.127.5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T18:14:22.847376+00:00",
        "timestamp": "1778264064",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "69600c12-e26c-4d71-be27-0ed4ea0359a0",
        "value": "192.109.139.51",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T18:15:25.134496+00:00",
        "timestamp": "1778264127",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e36fd507-8910-4119-a129-42aee4b482c0",
        "value": "46.203.210.11",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T18:29:02.074770+00:00",
        "timestamp": "1778264943",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d131b5d7-168e-4b5d-b616-5778e71ff2bc",
        "value": "49.51.141.76",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T18:35:01.067437+00:00",
        "timestamp": "1778265303",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5b304a75-4c3e-4036-ae9d-70ee3025ddd4",
        "value": "45.150.176.12",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T19:17:00.777124+00:00",
        "timestamp": "1778267822",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8def2f8e-4495-409b-98c9-640a153ffe3e",
        "value": "2602:fb54:1400::23",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T19:36:12.978050+00:00",
        "timestamp": "1778268974",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "910c03b5-f69b-411e-ac70-1411896c9e62",
        "value": "59.152.61.88",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T20:07:59.353726+00:00",
        "timestamp": "1778270881",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "867dcbeb-ca81-4306-b8b1-40e2a074394e",
        "value": "170.106.37.134",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-08T20:29:38.826292+00:00",
        "timestamp": "1778272181",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "20a47c09-08d3-4296-a6e9-0bf3fb717181",
        "value": "89.43.34.237",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}