{
  "Event": {
    "analysis": "1",
    "date": "2026-04-04",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-04-04",
    "publish_timestamp": "1775341671",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1775341670",
    "uuid": "7fd49ba7-d26a-4c27-9073-c44dff263e9c",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-04T02:26:30.482069+00:00",
        "timestamp": "1775269592",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6d76cab2-2892-4707-89cc-f060a3066a19",
        "value": "45.32.69.208",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-04T02:32:02.851442+00:00",
        "timestamp": "1775269924",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "03c34090-2863-4e57-9a23-ff1634f89dd2",
        "value": "172.70.250.162",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-04T19:30:30.522494+00:00",
        "timestamp": "1775331032",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "a366ea1e-7d9e-4c81-818b-02d108553d1e",
        "value": "195.178.110.108",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-04-04T22:27:48.495007+00:00",
        "timestamp": "1775341670",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7c1d233c-cbfc-4479-9026-ad95b93b65e7",
        "value": "46.151.182.140",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}