{
  "Event": {
    "analysis": "1",
    "date": "2026-03-05",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-03-05",
    "publish_timestamp": "1772755033",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1772755033",
    "uuid": "579f51f8-43f6-4663-87ef-1fbd81b01783",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-05T08:42:58.220747+00:00",
        "timestamp": "1772700179",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "8572cb3e-8ca5-497f-84f8-3d09590b678a",
        "value": "125.209.235.178",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-05T08:45:25.870592+00:00",
        "timestamp": "1772700327",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "93ada44e-07ff-4a6e-ad5b-ba0015218c85",
        "value": "114.111.32.198",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-05T09:45:51.831396+00:00",
        "timestamp": "1772703953",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "a6611684-0569-4075-8584-ff376addda96",
        "value": "54.169.210.208",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-05T21:34:03.159687+00:00",
        "timestamp": "1772746444",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ba811f66-0385-4a89-b8de-b5f84cced422",
        "value": "139.64.164.4",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-05T22:00:31.442843+00:00",
        "timestamp": "1772748038",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b29fb1a3-4c67-4933-a40c-68bc06bc66dd",
        "value": "159.65.159.252",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-05T23:57:12.075625+00:00",
        "timestamp": "1772755033",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2a098cab-0789-4868-87bd-caae850d9b9b",
        "value": "41.143.35.191",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}