{
  "Event": {
    "analysis": "1",
    "date": "2026-03-02",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-03-02",
    "publish_timestamp": "1772494744",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1772494743",
    "uuid": "4bdef18a-9879-4e17-b3ff-cb8ed88ef7ef",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T01:01:26.795931+00:00",
        "timestamp": "1772413289",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b3aa6d74-2c9b-48db-a7e6-4322c9b5d0e0",
        "value": "2a02:4780:b:1646:0:29d7:e1f8:1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T02:29:31.407419+00:00",
        "timestamp": "1772418572",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "dd7ff4f3-fa75-4709-b9bc-4373058299f7",
        "value": "103.8.27.27",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:46:54.991483+00:00",
        "timestamp": "1772462816",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7ef9e72a-953e-45c2-9d25-c89bcfcaaf11",
        "value": "125.209.235.186",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:46:58.644904+00:00",
        "timestamp": "1772462820",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9d4a41e7-cf75-4388-8fb4-1597160c6e1d",
        "value": "125.209.235.169",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T14:47:14.263409+00:00",
        "timestamp": "1772462835",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0161a586-75ea-47f4-a806-ae9bf5bdeb71",
        "value": "110.93.150.25",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T18:07:32.006149+00:00",
        "timestamp": "1772474854",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7ea33af6-aae3-43c6-81e1-e32b744b1fa3",
        "value": "3.86.224.2",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T18:51:40.049642+00:00",
        "timestamp": "1772477501",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2eda824c-1978-43e9-aeb1-72a36a951af1",
        "value": "110.93.150.154",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-02T23:39:02.321964+00:00",
        "timestamp": "1772494743",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5c8e6fbe-8c65-45fa-aaca-e2f7a369435f",
        "value": "43.130.154.56",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}