KRVTZ-NET IDS Alerts Analysis: Network Scanning and Exploitation Attempts

hello@craftedsignal.io — Fri, 13 Mar 2026 20:52:20 +0000

On March 13, 2026, KRVTZ-NET IDS systems generated a series of alerts indicative of network scanning and attempted exploitation. The alerts highlight suspicious activity originating from a range of IP addresses, suggesting a widespread campaign rather than a targeted attack from a single actor. Specific alerts include repeated GET requests to /remote/logincheck, potentially targeting the Fortigate VPN vulnerability CVE-2023-27997, as well as requests for hidden environment files and attempts…

Network-Scanning — CraftedSignal Threat Feed

KRVTZ-NET IDS Alerts Analysis: Network Scanning and Exploitation Attempts