{
  "Event": {
    "analysis": "1",
    "date": "2026-05-04",
    "extends_uuid": "",
    "info": "KRVTZ-NET IDS alerts for 2026-05-04",
    "publish_timestamp": "1777934327",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1777934322",
    "uuid": "d1e8e75d-81de-4b4b-857f-a52b33a23ea7",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#edbfa2",
        "local": false,
        "name": "type:OSINT', 'osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T03:19:57.781489+00:00",
        "timestamp": "1777864799",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "14ea55d5-f0f0-4727-b78e-efec6afad6bf",
        "value": "82.26.247.133",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET HUNTING curl User-Agent to Dotted Quad",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T04:04:53.658580+00:00",
        "timestamp": "1777867495",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "50a3212d-d3a4-432c-979c-c80a0cac6912",
        "value": "47.251.85.109",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T05:01:54.996597+00:00",
        "timestamp": "1777870916",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1cd4e1ae-0e2b-481a-a098-23174b68bb22",
        "value": "192.3.99.178",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T08:31:37.789437+00:00",
        "timestamp": "1777883499",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "029887b0-9782-40cc-bae8-9871c8061d10",
        "value": "5.255.124.156",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T11:21:20.585200+00:00",
        "timestamp": "1777893682",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "3bf224bc-bffe-4ec3-909f-a58bb3a5e14d",
        "value": "142.147.240.215",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T11:21:28.893225+00:00",
        "timestamp": "1777893690",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5fbed62d-498b-4118-8e15-ad6913a5443f",
        "value": "92.112.171.212",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T11:21:37.400337+00:00",
        "timestamp": "1777893699",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6522dcd2-3aca-4634-b75f-46f51eb5fdd6",
        "value": "82.26.247.235",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T12:25:40.049253+00:00",
        "timestamp": "1777897542",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "7722c198-b210-49f2-bfb4-eecad71a8d8d",
        "value": "104.238.9.55",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T16:29:27.995403+00:00",
        "timestamp": "1777912170",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "9afb275b-b7af-417c-b1d0-f6586b36bb3e",
        "value": "23.229.19.40",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T16:50:52.974541+00:00",
        "timestamp": "1777913455",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "87f1873d-7ade-478b-b3ce-b243d3d89171",
        "value": "23.236.182.181",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T16:51:01.446957+00:00",
        "timestamp": "1777913464",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "2b0ec736-9fa5-4fbe-b211-81fe2d906310",
        "value": "45.83.57.17",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T16:51:10.256054+00:00",
        "timestamp": "1777913472",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "1b0871d7-6aed-44ed-856a-40ea5311d0df",
        "value": "85.198.47.48",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T18:35:50.900107+00:00",
        "timestamp": "1777919753",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "129990ad-7f47-47f8-b665-578408bc2062",
        "value": "107.175.77.65",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T18:38:21.194439+00:00",
        "timestamp": "1777919903",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b441f834-9675-4cb9-8d8a-7887697f734a",
        "value": "191.96.254.215",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T20:45:08.463119+00:00",
        "timestamp": "1777927510",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bf1b5b81-3689-41a1-bbc5-873c1caccc4e",
        "value": "45.67.2.107",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T20:45:16.169348+00:00",
        "timestamp": "1777927518",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5ff8a3d6-8362-4e0f-ba08-08bb67d79926",
        "value": "192.186.151.128",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request to Hidden Environment File - Inbound",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T21:21:57.910693+00:00",
        "timestamp": "1777929719",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "115b3a01-e1ae-453c-accb-f78b35d610ae",
        "value": "195.114.15.136",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T22:24:05.032317+00:00",
        "timestamp": "1777933446",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b76dbcdb-9276-4836-8a68-2155af73ef25",
        "value": "104.239.42.86",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T22:25:00.638998+00:00",
        "timestamp": "1777933502",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "fc87f2e7-5678-4d1e-b553-10fcd6f3fdf7",
        "value": "85.198.47.183",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T22:38:16.624599+00:00",
        "timestamp": "1777934298",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "b2e6a569-8a3d-45e1-ab68-44230d4c6352",
        "value": "67.227.37.79",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T22:38:31.037711+00:00",
        "timestamp": "1777934313",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "dc23e77e-5188-4eef-bd27-1e1407f54a42",
        "value": "45.39.4.29",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET SCAN Exabot Webcrawler User Agent",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-05-04T22:38:40.528286+00:00",
        "timestamp": "1777934322",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "f18f3ede-fc4a-4f11-acb0-f2637d28b127",
        "value": "92.119.182.10",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}