{
  "Event": {
    "analysis": "1",
    "date": "2026-02-25",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-02-25",
    "publish_timestamp": "1772034792",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1772034791",
    "uuid": "cd0ed0b8-91fb-412b-ba3f-d73618b29cea",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "TGI HUNT gitrepo HTTP Probe",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-25T02:48:45.593094+00:00",
        "timestamp": "1771987727",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f483651d-a4f2-4cec-a809-515622959ea6",
        "value": "185.93.89.110",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious Fake Windows User-Agent in HTTP Header",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-25T11:13:11.807959+00:00",
        "timestamp": "1772017993",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "c3d2d614-0efc-428b-b84f-27b686067133",
        "value": "88.227.75.188",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET WEB_SERVER WEB-PHP phpinfo access",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-25T12:24:27.667304+00:00",
        "timestamp": "1772022269",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5828246a-a775-4520-9caa-41a3defc306a",
        "value": "174.138.16.66",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING Suspicious User-Agent Observed (Mozilla/5.0 (Windows NT XX.X Win64 x64) AppleWebKit/XXX.XX)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-25T15:29:02.614812+00:00",
        "timestamp": "1772033344",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1811a2c3-6c14-412c-aa0e-bde3d199c267",
        "value": "43.155.125.167",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-02-25T15:53:10.369293+00:00",
        "timestamp": "1772034791",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "4ac7f8c4-8b6e-448e-b93f-1f38c5b727c7",
        "value": "195.178.110.190",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}