{
  "Event": {
    "analysis": "1",
    "date": "2026-05-10",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-10",
    "publish_timestamp": "1778452222",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1778452212",
    "uuid": "cfe40aca-79f9-4945-94c2-9a7f732cc14a",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-09T23:26:56.600116+00:00",
        "timestamp": "1778369219",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c7db2805-6ca2-4fa5-b538-57596d5991c9",
        "value": "104.238.50.22",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T04:01:06.858196+00:00",
        "timestamp": "1778385670",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d88b5408-6cbb-49d3-8090-5e57a0c53cab",
        "value": "92.113.237.84",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T04:02:29.943660+00:00",
        "timestamp": "1778385751",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e39390b5-80bf-4e02-8203-ba69c45c5440",
        "value": "81.21.234.34",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T04:02:48.807405+00:00",
        "timestamp": "1778385770",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "93301d1c-9d91-4df5-aa2a-493b695d4b95",
        "value": "45.131.92.190",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T04:49:43.409482+00:00",
        "timestamp": "1778388584",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8f32e786-0cbb-4367-abe0-19aaf407bfb6",
        "value": "150.109.119.38",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T04:58:10.218133+00:00",
        "timestamp": "1778389091",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2bf25f76-abbd-47ec-b26d-4b9240a8c666",
        "value": "2001:470:1:c84::27",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET EXPLOIT Fortigate VPN - Repeated GET Requests to /remote/logincheck (CVE-2023-27997)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T05:47:40.516069+00:00",
        "timestamp": "1778392062",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ecbde6cb-a4a3-4c4c-9fed-102eafff42ce",
        "value": "2001:470:1:c84::16",
        "Tag": [
          {
            "colour": "#008a3f",
            "local": false,
            "name": "misp:threat-level=\"high-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T05:55:10.701305+00:00",
        "timestamp": "1778392512",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ba6fa095-a3c0-4ce0-a761-bc6d0867938d",
        "value": "82.25.224.95",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T06:10:37.138587+00:00",
        "timestamp": "1778393439",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9516aba4-c0d2-46eb-9341-665b80891b01",
        "value": "206.189.103.24",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T07:08:30.521217+00:00",
        "timestamp": "1778396912",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "20203784-bf6d-4cd2-8ce3-486929c7010f",
        "value": "82.23.215.231",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T07:08:46.678596+00:00",
        "timestamp": "1778396928",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "390120fd-7705-4a2e-bcec-ae1382bd41f6",
        "value": "82.29.230.238",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T07:55:53.488536+00:00",
        "timestamp": "1778399754",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "52bf1c9f-2b92-497b-a713-d55cc7261283",
        "value": "82.29.214.101",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T08:03:29.581742+00:00",
        "timestamp": "1778400210",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "34e861ac-027d-4e6f-b190-8805dc56565f",
        "value": "155.254.34.91",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T08:14:09.199020+00:00",
        "timestamp": "1778400850",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "91bd3d2e-d961-4dd2-960c-da4989053b72",
        "value": "82.25.245.174",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T08:19:11.154812+00:00",
        "timestamp": "1778401152",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7db002b6-e1c5-4f91-906a-9e6e3a9462f5",
        "value": "145.223.45.158",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T08:36:19.531316+00:00",
        "timestamp": "1778402181",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "a5a4a25c-4b21-44cf-8b8a-2718ed96af9d",
        "value": "108.165.197.102",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T08:39:27.300797+00:00",
        "timestamp": "1778402369",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "cd934bf3-1eaa-4e71-814f-4d0bf044fed5",
        "value": "107.175.208.170",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T08:40:07.455605+00:00",
        "timestamp": "1778402409",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ba5d91f5-499b-4789-82a6-ca2ed3128227",
        "value": "146.103.1.180",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T09:07:27.097607+00:00",
        "timestamp": "1778404048",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "783ebe4d-7382-4876-a244-4b07f35337dc",
        "value": "2a01:7e00::2000:6cff:feca:192d",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T09:08:13.554817+00:00",
        "timestamp": "1778404095",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "377e6d95-8b9e-4400-868a-b3ee72e144a2",
        "value": "50.114.92.153",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T09:13:03.290123+00:00",
        "timestamp": "1778404385",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "cb803650-982f-4f7f-ae29-d8ecf1bb88b0",
        "value": "145.223.44.72",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T09:13:12.158833+00:00",
        "timestamp": "1778404393",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2825e1fb-37b4-4863-b26f-8c942c2fb002",
        "value": "38.154.197.90",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET COINMINER Possible BitCoin Miner User-Agent (miner)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T10:47:08.008732+00:00",
        "timestamp": "1778410029",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "20bad010-d68d-4bfb-9b35-1c621b33c652",
        "value": "148.113.197.72",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T11:15:39.763945+00:00",
        "timestamp": "1778411741",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "608b18ba-a340-4fed-8516-01069d4c053e",
        "value": "45.67.2.54",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T11:16:12.394999+00:00",
        "timestamp": "1778411774",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "137f9f13-4466-45f8-b763-481df0f67051",
        "value": "45.41.162.5",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T11:17:58.597843+00:00",
        "timestamp": "1778411880",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bab9a29d-94d8-498a-9ef0-c8cf1922638d",
        "value": "108.165.181.186",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T11:24:50.217228+00:00",
        "timestamp": "1778412292",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "daacdf18-f8de-4caf-9818-5f59399012c5",
        "value": "43.131.32.36",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T11:32:28.585047+00:00",
        "timestamp": "1778412750",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "74810715-3f58-416b-8cf7-a2cb4716dee6",
        "value": "119.28.140.106",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T12:08:44.602888+00:00",
        "timestamp": "1778414926",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2bc3daab-ad1a-4468-80f1-4c5a49e3e507",
        "value": "191.101.41.21",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T12:08:51.459030+00:00",
        "timestamp": "1778414932",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "faa885e7-2119-47cd-8d4f-8bf04ecae582",
        "value": "38.154.197.111",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T13:22:01.759473+00:00",
        "timestamp": "1778419323",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5ae6c3e9-229a-4fc5-abff-44097b5d0754",
        "value": "181.214.6.150",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T13:45:13.226629+00:00",
        "timestamp": "1778420715",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6da20b6d-27bb-45fa-9ea5-cbd8f6f929ae",
        "value": "216.173.80.100",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T19:12:02.616114+00:00",
        "timestamp": "1778440324",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "645b3148-427b-485a-9555-c594d883ac33",
        "value": "34.7.25.251",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T19:16:11.638390+00:00",
        "timestamp": "1778440573",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "88588aae-cb0f-48ee-ae0d-2034365deee8",
        "value": "43.131.45.213",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T20:12:36.273102+00:00",
        "timestamp": "1778443957",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bb803a9c-9281-490a-a6ea-7e7e466a6b4c",
        "value": "2a00:23cc:e329:2701:99bd:6b50:e2d8:bde",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T20:49:55.610402+00:00",
        "timestamp": "1778446197",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "65cf77ca-fe17-4f02-a44e-39e4d51b9cb0",
        "value": "84.33.224.13",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T20:50:06.075788+00:00",
        "timestamp": "1778446208",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "027da7b1-0880-4bd5-b06d-4403b4f5a389",
        "value": "38.154.195.77",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T20:50:14.706999+00:00",
        "timestamp": "1778446216",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e38ccbb0-904d-4a6d-b966-ae3d67111242",
        "value": "181.214.6.191",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-10T22:30:10.228614+00:00",
        "timestamp": "1778452212",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "43c62682-d9e5-4c6f-92a6-409089f9aaf4",
        "value": "34.32.53.196",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}