{
  "Event": {
    "analysis": "1",
    "date": "2026-03-06",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-03-06",
    "publish_timestamp": "1772829033",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1772829001",
    "uuid": "512f6af2-9a7f-486f-b70b-d5eed26baa05",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-06T02:55:00.202216+00:00",
        "timestamp": "1772765701",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d26d0c5d-bfcd-4a3d-bf38-5d883b3f6c70",
        "value": "211.249.46.131",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-06T06:28:47.133653+00:00",
        "timestamp": "1772778528",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7cf6b936-9aff-4057-865e-e8a4a6483eb1",
        "value": "65.109.16.47",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Javascript Sandbox Escape via Global Object (process)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-06T17:23:12.717930+00:00",
        "timestamp": "1772817794",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fa268a09-789d-4343-95b5-46e95539d3ba",
        "value": "54.75.101.51",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-06T19:31:55.246997+00:00",
        "timestamp": "1772825517",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "390966be-87d3-490f-b552-007a6cece59d",
        "value": "13.39.48.151",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Javascript Prototype Pollution Attempt via __proto__ in HTTP Body",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-06T20:30:00.059205+00:00",
        "timestamp": "1772829001",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ec853c92-4991-4233-aaf6-c642a35274bf",
        "value": "52.47.175.228",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}