{
  "Event": {
    "analysis": "1",
    "date": "2026-03-23",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-03-23",
    "publish_timestamp": "1774304806",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1774304806",
    "uuid": "c3345562-2945-459e-bbb9-9bbec7e35e32",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Suspicious User-Agent Containing Security Scan/ner Likely Scan",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-23T00:33:55.822323+00:00",
        "timestamp": "1774226037",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e2879c9e-8c8a-4bca-a38c-46e8da7ece81",
        "value": "12.203.80.132",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Naver Webcrawler User-Agent (Naver.me)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-23T18:47:08.846506+00:00",
        "timestamp": "1774291631",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "69b4b936-a8f4-4e08-9dab-078361ea3ee6",
        "value": "125.209.235.181",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-23T19:03:42.148153+00:00",
        "timestamp": "1774292624",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e6ada3b5-06a2-4bcd-9421-cdb53dd3660f",
        "value": "192.109.200.196",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-23T20:26:49.949880+00:00",
        "timestamp": "1774297611",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "e502bf68-0479-42f3-85e8-1d13cdd62345",
        "value": "141.95.84.126",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-03-23T22:26:44.887289+00:00",
        "timestamp": "1774304806",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fed1724f-3cb8-455e-9e72-3f8af1cfc1bf",
        "value": "81.22.222.85",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}