{
  "Event": {
    "analysis": "1",
    "date": "2026-02-07",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-02-07",
    "publish_timestamp": "1770507828",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1770507827",
    "uuid": "3379ed68-0a78-4526-874d-4f2a586e14c8",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T01:40:08.780021+00:00",
        "timestamp": "1770428411",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9492caf8-8d32-40ed-bc95-3f785cde965a",
        "value": "114.111.32.192",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T02:01:25.845273+00:00",
        "timestamp": "1770429687",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4ed85b4e-9582-4291-8579-265d7b4ae825",
        "value": "110.93.150.44",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T03:15:35.600226+00:00",
        "timestamp": "1770434137",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b4d649e1-922c-435b-875f-d48bb8f4be9e",
        "value": "2602:80d:1005::1e",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T07:12:02.192222+00:00",
        "timestamp": "1770448323",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9848c639-6628-4474-bba0-289da9aa59ab",
        "value": "162.142.125.201",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T11:34:33.702292+00:00",
        "timestamp": "1770464075",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "92b9a62a-d596-48aa-8f6e-174db8b972c9",
        "value": "66.163.118.146",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T18:00:37.265160+00:00",
        "timestamp": "1770487243",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "22f05bf2-15a1-4f46-9190-a93e42e1458d",
        "value": "43.156.204.134",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T18:21:08.661093+00:00",
        "timestamp": "1770488470",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b455725a-9f0c-46fc-8a56-768eec6d3ca4",
        "value": "103.8.27.27",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Google Webcrawler User-Agent (Mediapartners-Google)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T23:15:21.381907+00:00",
        "timestamp": "1770506123",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ed80eeb8-7f43-42e9-9ac3-2c59c9ecff5b",
        "value": "186.192.63.112",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T23:39:53.714238+00:00",
        "timestamp": "1770507595",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "102c1461-6f44-4a6f-8bad-18885a3d2a38",
        "value": "185.82.93.34",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-07T23:43:46.236469+00:00",
        "timestamp": "1770507827",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0b3913f4-9a55-4663-a5e6-e7eec8d0b320",
        "value": "74.81.49.108",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}