{
  "Event": {
    "analysis": "1",
    "date": "2026-01-24",
    "extends_uuid": "",
    "info": "KRVTZ IDS alerts for 2026-01-24",
    "publish_timestamp": "1769298687",
    "published": true,
    "threat_level_id": "3",
    "timestamp": "1769298684",
    "uuid": "f302f63b-43e3-4a59-aeac-ff1a9ae002c3",
    "Orgc": {
      "name": "Krawczyk Industries Limited",
      "uuid": "593e9fc8-be28-4cb2-a79b-43f8950d210f"
    },
    "Tag": [
      {
        "colour": "#bf8e0e",
        "local": false,
        "name": "KRVTZ-NET:information-gathering=\"scanner\"",
        "relationship_type": ""
      },
      {
        "colour": "#ffffff",
        "local": false,
        "name": "tlp:clear",
        "relationship_type": ""
      },
      {
        "colour": "#00ce5f",
        "local": false,
        "name": "misp:event-type=\"observation\"",
        "relationship_type": ""
      },
      {
        "colour": "#50003a",
        "local": false,
        "name": "kill-chain:Reconnaissance",
        "relationship_type": ""
      },
      {
        "colour": "#009042",
        "local": false,
        "name": "misp:automation-level=\"unsupervised\"",
        "relationship_type": ""
      },
      {
        "colour": "#004646",
        "local": false,
        "name": "type:OSINT",
        "relationship_type": ""
      },
      {
        "colour": "#0071c3",
        "local": false,
        "name": "osint:lifetime=\"perpetual\"",
        "relationship_type": ""
      }
    ],
    "Attribute": [
      {
        "category": "Network activity",
        "comment": "ET INFO Unsupported/Fake Windows NT Version 5.0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T15:57:14.713128+00:00",
        "timestamp": "1769270236",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "eaec2fae-df92-416f-a9fd-7dc71f9184fc",
        "value": "197.189.143.157",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Unsupported/Fake Windows NT Version 5.0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T20:27:54.140722+00:00",
        "timestamp": "1769286475",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "d4eba942-8750-42cc-8685-03f652f911ba",
        "value": "136.44.67.71",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "- i Censys - HTTP User-Agent Scanner",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T21:03:56.305137+00:00",
        "timestamp": "1769288638",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "bbe269ad-e6de-4e80-b50f-09c68cff7194",
        "value": "162.142.125.124",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET USER_AGENTS User-Agent (_TEST_)",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T22:15:33.526058+00:00",
        "timestamp": "1769292935",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "6dd231d9-d073-470e-ba2e-964ab23019fa",
        "value": "43.166.247.155",
        "Tag": [
          {
            "colour": "#007d3a",
            "local": false,
            "name": "misp:threat-level=\"low-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#50003a",
            "local": false,
            "name": "kill-chain:Reconnaissance",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Unsupported/Fake Windows NT Version 5.0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T23:07:51.714223+00:00",
        "timestamp": "1769296073",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "5ee010ff-d77c-4993-a56e-dc55daf5813b",
        "value": "129.0.189.183",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Request for Visual Studio Code sftp.json - Possible Information Leak",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T23:15:47.807679+00:00",
        "timestamp": "1769296549",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "ad719ab9-4fd1-494c-bfa0-d34d72bf1475",
        "value": "103.197.240.59",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      },
      {
        "category": "Network activity",
        "comment": "ET INFO Unsupported/Fake Windows NT Version 5.0",
        "deleted": false,
        "disable_correlation": false,
        "last_seen": "2026-01-24T23:51:22.865501+00:00",
        "timestamp": "1769298684",
        "to_ids": true,
        "type": "ip-src",
        "uuid": "72970edd-87c2-45e2-af38-073ff939b9c8",
        "value": "65.86.200.165",
        "Tag": [
          {
            "colour": "#00833c",
            "local": false,
            "name": "misp:threat-level=\"medium-risk\"",
            "relationship_type": ""
          },
          {
            "colour": "#a80079",
            "local": false,
            "name": "kill-chain:Exploitation",
            "relationship_type": ""
          }
        ]
      }
    ]
  }
}