{
    "version": 1,
    "surface": [
        "web-cms",
        "web-app",
        "web-static",
        "panel",
        "ssh",
        "mail-smtp",
        "mail-imap-pop",
        "mail-webmail",
        "dns",
        "db",
        "ftp",
        "vpn",
        "iot-router",
        "honeypot"
    ],
    "attack_type": [
        "recon",
        "secrets-hunt",
        "cve-exploit",
        "credential-brute",
        "credential-spray",
        "credential-stuffing",
        "injection",
        "spam-relay-probe",
        "open-proxy-probe",
        "dos-pattern",
        "scanner-tool",
        "bot-impersonation",
        "ai-crawler",
        "unknown"
    ]
}