{
  "Event": {
    "analysis": "1",
    "date": "2026-05-20",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-20",
    "publish_timestamp": "1779316402",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1779316402",
    "uuid": "bcd222e6-4fd6-4cdd-81d2-1434cd4603ff",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-19T23:42:04.903050+00:00",
        "timestamp": "1779234126",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e3775508-23ed-458a-b220-45465504605f",
        "value": "5.255.102.136",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T00:06:54.688097+00:00",
        "timestamp": "1779235616",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b3939038-1cc4-4902-9d45-bed8e9ccd5ec",
        "value": "2001:470:1:fb5::1a0",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:14:45.254930+00:00",
        "timestamp": "1779243287",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6b5c5cfc-2057-4b89-86e3-924961d8b5bf",
        "value": "43.157.67.70",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:20:01.739013+00:00",
        "timestamp": "1779243604",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "af621d51-e9e7-4939-b93f-20f8d727988d",
        "value": "170.106.35.137",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:23:55.305579+00:00",
        "timestamp": "1779243837",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "930c0ec9-bc53-48f3-a6e6-23fa71276ae3",
        "value": "43.157.22.109",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:29:32.547912+00:00",
        "timestamp": "1779244174",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "724f87fc-ddae-4f31-b872-a1a7d9123c5d",
        "value": "43.130.154.56",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:32:05.969534+00:00",
        "timestamp": "1779244328",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "279e4694-ae29-4364-8251-4fdac6c22aab",
        "value": "43.166.128.86",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:32:12.125603+00:00",
        "timestamp": "1779244334",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9a0147a3-c0ca-4e87-ace3-76b1f27de5d5",
        "value": "101.32.15.141",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:34:30.059954+00:00",
        "timestamp": "1779244472",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "75287893-b9f0-45da-bd78-5c38d552e6c1",
        "value": "43.166.226.57",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:35:25.336925+00:00",
        "timestamp": "1779244527",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3e116e59-86c7-4811-b172-eeabdb52acb7",
        "value": "43.157.43.147",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:39:07.923446+00:00",
        "timestamp": "1779244749",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c1bd21a1-35e5-40e8-91b7-3249923f1584",
        "value": "43.155.26.193",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T02:45:22.965642+00:00",
        "timestamp": "1779245124",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f693dd80-bd2b-430d-8631-1bd7d2cbcf1f",
        "value": "43.157.52.37",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T05:26:43.800889+00:00",
        "timestamp": "1779254805",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0879929d-b1aa-4511-abf0-e8f9badd70dd",
        "value": "140.99.197.191",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T06:26:26.405824+00:00",
        "timestamp": "1779258387",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2d198356-0f09-42d2-95d9-cb08aa1f74f3",
        "value": "43.135.115.233",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T06:26:30.569608+00:00",
        "timestamp": "1779258391",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6c25b3fd-3176-4bd3-a438-ff631f899e3a",
        "value": "43.153.26.165",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T06:32:03.246102+00:00",
        "timestamp": "1779258724",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2b702368-ef9b-4869-97bb-f4c8a406ed59",
        "value": "43.166.224.244",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T14:59:18.151944+00:00",
        "timestamp": "1779289159",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c271c24a-3e02-4e07-9b77-385a87a5bcf5",
        "value": "82.29.227.25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T15:01:49.565418+00:00",
        "timestamp": "1779289310",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9327797b-2f72-4fe9-9f43-d1547dd396b8",
        "value": "2602:fb54:1400::137",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T17:42:00.628847+00:00",
        "timestamp": "1779298922",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "156fda77-9f56-4a99-8184-5602da40ecdc",
        "value": "170.106.187.106",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T17:43:47.559584+00:00",
        "timestamp": "1779299029",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "02459806-11c3-47b1-9d69-980aca388999",
        "value": "43.157.98.187",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T17:50:37.611061+00:00",
        "timestamp": "1779299439",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c19b2ce0-4333-458b-a6e9-57cac4c9d7a5",
        "value": "43.153.204.189",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T17:55:27.596566+00:00",
        "timestamp": "1779299729",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "719bbebe-cc0d-4fe1-8ae9-a3c4822aa7a0",
        "value": "43.131.45.213",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T18:17:55.993960+00:00",
        "timestamp": "1779301077",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "56b999df-ff24-4bf4-a5eb-d8de778ea4c4",
        "value": "166.88.169.82",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T18:33:36.246710+00:00",
        "timestamp": "1779302017",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "67d1d233-6a2c-42f6-9b8b-eb127ecc33ff",
        "value": "140.238.254.59",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T21:17:41.837428+00:00",
        "timestamp": "1779311863",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "127e758b-73df-4ceb-ae5f-33b2d9eb6c75",
        "value": "2602:fb54:1400::1d6",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:17:20.931456+00:00",
        "timestamp": "1779315443",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9271ef7c-b602-4ca4-af72-769fe9da952c",
        "value": "150.109.46.88",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:20:51.498085+00:00",
        "timestamp": "1779315653",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bf331f5b-674a-4019-b6ef-3fd5bff9ce22",
        "value": "20.229.116.221",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "TGI HUNT eval( in HTTP Client Body",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:22:19.034833+00:00",
        "timestamp": "1779315740",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e329aeaf-5cf4-4b27-8f5b-5c3abfdfe1fb",
        "value": "193.84.29.105",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:23:54.670636+00:00",
        "timestamp": "1779315836",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d69a4623-6e95-4a28-8a86-3745e40358f6",
        "value": "43.154.140.188",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:23:58.544151+00:00",
        "timestamp": "1779315839",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "daedde77-3673-4ad5-a629-049f523d8430",
        "value": "43.132.214.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:25:20.372387+00:00",
        "timestamp": "1779315921",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ebf68265-695d-4c71-8148-60d2270c2cf0",
        "value": "43.157.174.69",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:27:40.618930+00:00",
        "timestamp": "1779316062",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8032ebad-09ca-4683-900a-e32ee9f5b81a",
        "value": "43.134.186.61",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:30:20.798808+00:00",
        "timestamp": "1779316222",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fd43316f-48ba-4d71-8607-6a868773d6a1",
        "value": "49.51.141.76",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:30:41.921853+00:00",
        "timestamp": "1779316243",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8784ad9d-a70b-4b00-ad8b-c3dcb76ef953",
        "value": "49.51.166.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:32:01.233455+00:00",
        "timestamp": "1779316322",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6eba0e7f-6160-455a-9c6b-fc9c72c66414",
        "value": "49.51.132.100",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-20T22:33:21.027445+00:00",
        "timestamp": "1779316402",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "555e8711-bd7f-4695-9bfd-f645c3cfd8dd",
        "value": "43.130.141.193",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}