{
  "Event": {
    "analysis": "1",
    "date": "2026-03-09",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-03-09",
    "publish_timestamp": "1773091498",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1773091497",
    "uuid": "55ad908f-0ce1-4273-bc64-0c1fdf7a4c58",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T00:35:57.338157+00:00",
        "timestamp": "1773016558",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "334f902b-0039-4b27-995e-ac25c6fa51ec",
        "value": "110.93.150.134",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T08:22:15.959639+00:00",
        "timestamp": "1773044537",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5fb4dc14-c554-4499-a355-67261b2b38af",
        "value": "185.177.72.51",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN SFTP/FTP Password Exposure via sftp-config.json",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T09:46:01.571250+00:00",
        "timestamp": "1773049563",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7dc18571-da47-4b98-ba17-84001f6301f8",
        "value": "2a09:bac6:d69d:18d2::279:87",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SPECIFIC_APPS Drupalgeddon2 <8.3.9 <8.4.6 <8.5.1 RCE Through Registration Form (CVE-2018-7600)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T12:21:59.854300+00:00",
        "timestamp": "1773058921",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2ba9c3ba-9a2b-477b-ac62-878119eb3f31",
        "value": "95.26.6.40",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T15:13:42.841764+00:00",
        "timestamp": "1773069224",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ee99918a-d735-47ee-904e-7f07e93cc407",
        "value": "110.93.150.34",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T15:13:46.967813+00:00",
        "timestamp": "1773069228",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e952d1ce-d74a-4362-8aca-746dc94c55d4",
        "value": "211.249.46.104",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-09T21:24:55.582206+00:00",
        "timestamp": "1773091497",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "595a4034-b410-433b-8587-a09889f7b43b",
        "value": "88.198.51.48",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}