{
  "Event": {
    "analysis": "1",
    "date": "2026-05-15",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-15",
    "publish_timestamp": "1778876372",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1778876349",
    "uuid": "4f31c24b-8337-45f1-b3d9-c342dac5b5b4",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-15T15:35:29.294579+00:00",
        "timestamp": "1778859333",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d5df9af1-d207-48af-9203-d15bdcfb82a6",
        "value": "43.164.196.244",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-15T16:23:15.640726+00:00",
        "timestamp": "1778862198",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4e46c20c-74af-4430-b237-2c4e1a606f25",
        "value": "82.21.224.251",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-15T16:55:28.515547+00:00",
        "timestamp": "1778864130",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c6c68a8b-e1da-4517-a0b4-5b43c0ddb214",
        "value": "140.99.189.35",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-15T18:46:39.194676+00:00",
        "timestamp": "1778870801",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fab59631-808c-44fb-bb0e-2fe742043980",
        "value": "178.63.110.88",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-15T20:19:07.744251+00:00",
        "timestamp": "1778876349",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "90db8037-fcfb-4462-b88e-63b66bf6edc0",
        "value": "2602:fb54:1400::1c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}