{
  "Event": {
    "analysis": "1",
    "date": "2026-02-16",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-02-16",
    "publish_timestamp": "1771286135",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1771286135",
    "uuid": "643e29d8-3c36-401c-b083-dbb94917c521",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-16T02:18:06.719653+00:00",
        "timestamp": "1771208288",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "cde6ae14-1d08-4900-9d89-a4f39cc29e35",
        "value": "43.130.26.3",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-16T09:41:04.182301+00:00",
        "timestamp": "1771234865",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5fa3b934-f5e3-4ed0-a988-66ee32c1a597",
        "value": "107.148.158.105",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-16T10:23:39.346575+00:00",
        "timestamp": "1771237421",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0761fb4c-a1d0-4629-bfca-71472776f530",
        "value": "2a02:c207:2308:2157::1",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-16T17:16:23.319644+00:00",
        "timestamp": "1771262184",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "71ac6098-196f-4eea-9bcf-1a44ad89adc4",
        "value": "43.164.197.177",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-16T23:55:28.565257+00:00",
        "timestamp": "1771286129",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "739c7972-7ac2-4a6a-962f-f7dff089b413",
        "value": "125.209.235.173",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-16T23:55:33.555886+00:00",
        "timestamp": "1771286135",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c27a08df-06b7-4109-9d37-c77a9ec42bb2",
        "value": "114.111.32.164",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}