{
  "Event": {
    "analysis": "1",
    "date": "2026-04-29",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-04-29",
    "publish_timestamp": "1777497249",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1777497244",
    "uuid": "e28d0d7f-1857-4a10-b2a8-440755c1a522",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T03:00:55.415362+00:00",
        "timestamp": "1777431657",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "00e780e2-4ab1-46db-899c-7b96a569340c",
        "value": "2a0b:8bc0:2:5a50::1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "haproxy: 123.58.196.49 connecting to (submission/TCP) 15x in hour, possible bruteforcing.",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T04:27:37.076574+00:00",
        "timestamp": "1777436858",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d0d7d741-c98c-45f1-b37e-d0b6a24a54fb",
        "value": "123.58.196.49",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T04:56:31.807954+00:00",
        "timestamp": "1777438593",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "70edc6c4-85e0-4ed4-979c-47afb58a9b1d",
        "value": "43.134.177.47",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:02:05.635611+00:00",
        "timestamp": "1777438927",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7e96ba56-219a-4f2b-955e-a8a1bc7bfc00",
        "value": "43.134.36.238",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:04:19.395144+00:00",
        "timestamp": "1777439060",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7cb871a4-92ce-4846-a867-2cb851c36b64",
        "value": "170.106.8.20",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:04:43.122389+00:00",
        "timestamp": "1777439084",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "22bc01d8-9ae2-485e-8b6f-8aef2619544c",
        "value": "43.166.248.219",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:06:40.843572+00:00",
        "timestamp": "1777439202",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "592ad921-3c0b-4088-a309-e8b09de41d3a",
        "value": "43.134.98.88",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:07:59.722663+00:00",
        "timestamp": "1777439281",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c08b53b2-29a5-45bb-a36b-0518b46fa23f",
        "value": "129.226.83.4",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:09:17.202701+00:00",
        "timestamp": "1777439358",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "41072fbf-1091-4007-b197-b1647eaa208c",
        "value": "43.134.114.37",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:13:24.689243+00:00",
        "timestamp": "1777439606",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e428847b-94d2-4f31-82d7-8705561b6937",
        "value": "43.133.61.171",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:13:29.108706+00:00",
        "timestamp": "1777439610",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "beb95676-5e89-440f-b22a-f32b5017649b",
        "value": "43.156.114.184",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:14:15.633601+00:00",
        "timestamp": "1777439657",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1fdf8edd-11b5-4713-af49-174cbbf53a56",
        "value": "119.28.100.147",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:17:25.327482+00:00",
        "timestamp": "1777439847",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "913b5d5c-2ccd-4b8c-b2ef-c33c82452b53",
        "value": "43.156.232.134",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T05:22:01.785248+00:00",
        "timestamp": "1777440123",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0a8ffb0c-4dea-456f-8f4a-c18425c28948",
        "value": "43.134.92.251",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:23:31.162363+00:00",
        "timestamp": "1777458213",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "64e0bfe2-f0e1-447f-a822-aa8c0eda3ee8",
        "value": "43.164.190.28",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:25:38.872273+00:00",
        "timestamp": "1777458340",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "69c73937-7ec5-48ad-a1f8-7e0363362175",
        "value": "43.161.251.162",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:27:04.029459+00:00",
        "timestamp": "1777458425",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6f861bdc-5840-4e22-bd36-5667eb15f926",
        "value": "43.164.3.23",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:28:14.360634+00:00",
        "timestamp": "1777458496",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "dba80f70-6d9d-4eec-8ea2-42dedc7c049c",
        "value": "43.165.7.135",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:31:37.376458+00:00",
        "timestamp": "1777458699",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1e6d0c66-c4d4-47f6-b22f-436bc0d6df58",
        "value": "43.165.198.5",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:32:47.659732+00:00",
        "timestamp": "1777458769",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4685396f-962a-4820-991c-b5da47a5ad6a",
        "value": "43.164.131.148",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:35:27.452991+00:00",
        "timestamp": "1777458929",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "32533b4e-1250-4740-9878-0e91cb5a4012",
        "value": "43.160.219.206",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:36:30.041654+00:00",
        "timestamp": "1777458992",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "42428d1a-3d53-417a-bd03-2d8fe5e8f416",
        "value": "43.156.67.44",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T10:37:09.597774+00:00",
        "timestamp": "1777459031",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4bab64a0-fe4c-41ae-a40a-4ddfb41a36e1",
        "value": "43.165.174.53",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T14:26:30.720020+00:00",
        "timestamp": "1777472792",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3fb98170-d8ea-4583-8c70-0b2ccd931aac",
        "value": "107.175.119.129",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T14:26:44.477265+00:00",
        "timestamp": "1777472805",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6a521f96-50dd-4b03-b2ad-0f2671617c44",
        "value": "199.180.8.48",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T14:28:30.770386+00:00",
        "timestamp": "1777472913",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "14d7bc67-779e-4a59-9c65-e92568af87b4",
        "value": "173.211.69.236",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T14:34:31.344574+00:00",
        "timestamp": "1777473272",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "227e3ea0-44df-44dc-9df7-ad45c8711126",
        "value": "176.113.67.64",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T17:48:37.173410+00:00",
        "timestamp": "1777484919",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "593d8238-be4a-4dd2-95a2-5535a00dabac",
        "value": "92.112.217.77",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T18:40:21.269817+00:00",
        "timestamp": "1777488022",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "af00a8c0-7909-4c3b-b335-e9de822c2840",
        "value": "149.57.17.192",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T21:13:50.553793+00:00",
        "timestamp": "1777497232",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c92314b6-87ab-40ef-a5ee-84b950c104cb",
        "value": "64.188.120.15",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-29T21:14:02.785941+00:00",
        "timestamp": "1777497244",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "408b034e-4cbb-43b4-99d6-24d7e85bfab3",
        "value": "82.22.211.237",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}