{
  "Event": {
    "analysis": "1",
    "date": "2026-04-24",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-04-24",
    "publish_timestamp": "1777065479",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1777065346",
    "uuid": "66576149-c3e4-4fdd-ac70-efb204c5d5f6",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T23:30:33.802965+00:00",
        "timestamp": "1776987036",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b6c2c7d1-e304-4157-9cd0-a54050509abc",
        "value": "125.209.235.175",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T23:54:23.422574+00:00",
        "timestamp": "1776988465",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1c066489-b113-49ed-b229-e172f64dd06f",
        "value": "2a09:bac1:5ba0:d60::38a:5c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-23T23:54:29.059855+00:00",
        "timestamp": "1776988471",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7fe53c16-d0b5-4ceb-bc18-3d35eb8e40b0",
        "value": "2a09:bac1:5be0:d60::38a:5c",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ATTACK [PTsecurity] React Server Components RCE (CVE-2025-55182)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T00:08:58.104989+00:00",
        "timestamp": "1776989339",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "0f290206-8215-4351-a853-943417f01093",
        "value": "109.207.97.147",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T00:36:19.612575+00:00",
        "timestamp": "1776990981",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d2bed045-2b12-44d0-8495-a26819732024",
        "value": "43.128.84.211",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T01:35:23.722812+00:00",
        "timestamp": "1776994525",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ca5100bb-e07b-4a8e-9913-f6a063476b45",
        "value": "103.153.182.11",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T06:20:51.022530+00:00",
        "timestamp": "1777011653",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c2ecef24-f884-40ea-b121-d652b59a40c5",
        "value": "140.245.39.180",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T08:44:16.188310+00:00",
        "timestamp": "1777020258",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "754efe65-9b88-4917-8e58-1ef1859e0e72",
        "value": "143.198.166.216",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T09:17:23.364572+00:00",
        "timestamp": "1777022245",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "416d9bbf-a9f7-4d52-9563-a7c768a3f09d",
        "value": "140.245.81.193",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T09:32:12.716992+00:00",
        "timestamp": "1777023134",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ec1a83bf-5f27-4bc8-9ebf-eb0d79e59db5",
        "value": "2a02:4780:5e:f977::1",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T10:32:53.605446+00:00",
        "timestamp": "1777026775",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "64ed5dfb-4c5b-4aed-ace3-cd10da3cdff2",
        "value": "101.32.49.171",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T10:33:32.590778+00:00",
        "timestamp": "1777026814",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e02c4fd7-ec0b-425f-9225-ac809a5db5c0",
        "value": "43.166.224.244",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T10:34:59.627226+00:00",
        "timestamp": "1777026901",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "a5e70830-843f-4866-b4ee-63ccfdef7948",
        "value": "43.133.66.51",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER Possible SQL Injection WAITFOR DELAY in HTTP URI",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T10:37:14.839632+00:00",
        "timestamp": "1777027037",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ee792969-5a7b-4954-b3d8-28d771abed28",
        "value": "2a03:cfc0:8000:2e::9532:7419",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T10:39:46.628767+00:00",
        "timestamp": "1777027188",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "94498699-6f7c-4c52-a59e-5e1b56f4acb7",
        "value": "43.155.162.41",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T10:49:29.207315+00:00",
        "timestamp": "1777027770",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5c3fdc16-9e26-4c73-8f4e-697d060af8f1",
        "value": "185.177.72.100",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T17:24:14.891139+00:00",
        "timestamp": "1777051457",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "13559c36-b1ae-43e6-8f89-964502cd25cd",
        "value": "101.32.15.141",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T18:53:37.744323+00:00",
        "timestamp": "1777056820",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3fb84f4d-cca0-46d4-8338-ed07bebaeea5",
        "value": "43.134.186.61",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-24T21:15:44.907345+00:00",
        "timestamp": "1777065346",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5ff2657f-c880-45f5-9fe6-d9f3919027cc",
        "value": "103.153.183.69",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}