{"ip":"134.195.157.249","total_events":13688,"verdict":{"verdict":"scanning","label":"Sustained targeting","detail":"13,688 events across 1 port(s)","confidence":"high","network_type":null,"why":["13,688 requests against only 1 service(s), which is depth rather than a sweep.","Typical of credential stuffing or a single-service campaign; the median address here sends three requests.","No exploit payload observed, so this describes volume and focus, not a confirmed compromise attempt.","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"57,134,770 bytes sent","bytes_sent":57134770,"session_seconds":29,"persistent":false}},"first_seen":"2026-08-22T19:15:58","last_seen":"2026-08-23T02:24:55","events_24h":0,"events_7d":13688,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":399296,"org":"Rackdog, LLC"},"source_domain":null,"known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":7928,"proto":"tcp","label":"","count":13688}],"fingerprints":{"ssh_hassh":[],"tls_ja4":[],"tls_ja3":[],"ja4h":["ge11nr10zh_781e2039db6d","ge11nr10en_781e2039db6d","ge11nr10ja_781e2039db6d"]},"fingerprint_peers":{"ge11nr10zh_781e2039db6d":2,"ge11nr10en_781e2039db6d":2,"ge11nr10ja_781e2039db6d":2},"user_agents":["Mozilla/5.0 (iPad; CPU OS 14_8 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.8 Mobile/15E148 Safari/604.1","Mozilla/5.0 (Linux; Android 13; SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.178 Mobile Safari/537.36","Mozilla/5.0 (Linux; Android 14; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.178 Mobile Safari/537.36","Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:122.0) Gecko/20100101 Firefox/122.0","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36","Mozilla/5.0 (iPhone; CPU iPhone OS 17_2_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/121.0 Mobile/15E148 Safari/605.1.15"],"timeline":[{"date":"2026-08-22","count":5091},{"date":"2026-08-23","count":8597}],"recent_events":[{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003 �\b�h#�\t��Ɏ�mǯE\u001b�(w���=�Ȓ�G�� ����$�[_f$}h�����Z_�sdM�\n-d�T��\u001c\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 �J��:Rw\u0005�Q�\u0007�(�9�ȭ�Zq:bW���\u0006\u0010\u000b","payload_hex":"16030100ee010000ea030320e708816823f309adf8c98ea66dc7af451bea2877cef6bc3db6c892fc47929320c6f4a7ef24a25b5f66247d688ab0d9eec15a5fc673644deb0a2d64ab5484aa1c000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d0020a54abde13a5277059d519007ed28f0397fefc8adb25a713a6257ab81a306100b","method":"","user_agent":"","ja3":"","session":"8fddeb1d-2b7e-4494-b4f5-2868df51cbb6","seq":2,"duration_ms":19338,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"b651f436228f8c2a","label":"TLS/SSL","strings":["[_f$}h","mofami8.gochatyc.xyz","Zq:bW"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003\u0011v�/�\u0015\u000fh\u0001\u0006 ~���{\u0006O\u0011JW#�4Dxc��'E\u0004 V\u0003\u0007��F�\u0016�i/I��)�=���?�WZ]\u001f��6V]�\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 � ӔK�t���\u0010\u0017g�|l�̧��K\u001c#$�L����b","payload_hex":"16030100ee010000ea03031176912fc9150f680106207ea58e877b064f114a5723f734447863ffe627450420560307a0d646fa168e692f49f28529d83d8c95a53f97575a5d1fe2fd36565df3000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d0020de20d3944bc47481b7a2101767d77c6cd9cca7a2e04b1c2324aa4cad928ea262","method":"","user_agent":"","ja3":"","session":"019d5faf-cab7-471f-8fab-e1ba23f8d2cb","seq":2,"duration_ms":19187,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"29159b27df130c39","label":"TLS/SSL","strings":["4Dxc","mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003��#2��\f>l���V�pS8��+���l�w,�\u0007��\u0010 �\u0013��H5uwl�\u0011�NP�zA�� �V\r���}`\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 ������\\�Y`�����1`�؞6�W�\u0018ИA\fh�<","payload_hex":"16030100ee010000ea03038cbc2332ecaf0c3e6ce29ec556d0705338b2952bab8eab6ce6772cd807f0ba1020c413a59e483575776cbb11cc4e50a07f7a41819320be56ef8ca00dbec6dc7d60000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d0020b39297bdbee75ccc59608ea6d1e1a2316088d89e36b057f818d098410c68ee3c","method":"","user_agent":"","ja3":"","session":"30192fda-ab35-471d-8b3b-3e8b4859c3c7","seq":2,"duration_ms":22150,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"6f3f876decabd033","label":"TLS/SSL","strings":["H5uwl","mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003Օ\u0000�l�\u0015��B��!b��j@\\�\u000e-��֥)\u001f*^v\u0011 ����+l�LJ@�a҃�g�EX�\f\u000bQU��8�Ē�g\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 �d�w�-����� +�9�]\u0006\u0000\t�������M�\u000fO2","payload_hex":"16030100ee010000ea0303d59500bc6cb115b9e042a8fd2162a9c96a405cb50e2ddeccd6a5291f2a5e7611209a8b9ef42b6cc7c787409a61d283d167f64558eb0c0b5155e0fc38a9c4928467000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d0020ff64b277bf2d9a849287a3202bfd39ec5d060009bc88b5a2b5beb94dc40f4f32","method":"","user_agent":"","ja3":"","session":"20c33076-7ec3-4b21-b05e-f54aedfc5e28","seq":2,"duration_ms":21573,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"8e55ee4e1412850d","label":"TLS/SSL","strings":["mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003t����\u0014L�K\u001e(����=x\u001dW��zbzW7���\u0019k� L'q�UtP�d��\"�U�N�\u001bR�2X@E\u000b��W�[\u0011P\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 1\u001e\u001b��p�L�C��H#˓4�E�YI�/�·o�DM,","payload_hex":"16030100ee010000ea030374fe91b3bf144cc04b1e28b68c89d33d781d57f7b77a627a573783aac3196bf6204c2771cf557450ab64c0c922d655d04ef81b52db325840450be5aa579d5b1150000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d0020311e1bfffb70b94cd843bcb54823cb93349e45875949bd2f89c2b76fe7444d2c","method":"","user_agent":"","ja3":"","session":"ee5138e4-80f6-4372-920d-dcf58bbaacf0","seq":2,"duration_ms":21348,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"330489392fcee904","label":"TLS/SSL","strings":["zbzW7","2X@E","mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003\u0001���6k;+�\r屙\u000fI�������4A\u000b�$]�!\u0014� R'[��W'fU&V�t���\u000e\u0015�\u001f]��Ÿ��%��D�\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 \u001a\u001a�\rcG�4\u000b�a�ST���q\fBz^�\u0004F�X�V\u0007�!","payload_hex":"16030100ee010000ea030301938cc1366b3b2bcd0de5b1990f4981a0a6bdf89fd234410bd6245d972114f02052275bc0f45727665526569e74bbaf9f0e15a51f5dc1f1c5b8a5ab25afd744ca000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d00201a1a850d6347db340b9f61b55354f8c1ba710c427a5eca0446e658ad5607a621","method":"","user_agent":"","ja3":"","session":"52124b5a-70d3-49df-9abd-f0cb30dc218b","seq":2,"duration_ms":18831,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"ee3903e7297c0c2f","label":"TLS/SSL","strings":["6k;+","W'fU&V","mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003�w�զR^����S\u0011K\u001d,@�ӝ\u0017$D\u0001��[��\u0011>d ��еJlƂ��_}!���y㘣��\u001c�\u001aX\u001f�\n\u0015Q�\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 �\b�H���|Q�Ě��N\u0000i��}�-��˯l����\u0012","payload_hex":"16030100ee010000ea0303d577bad5a6525ea5d3c6c953114b1d2c40b4d39d1724440181fc5bcfde113e6420a7ccd0b54a6cc6829fdd5f7d2184e7eb79e398a3b2cf1cde1a581fdb0a1551cc000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d0020e208ef48acb3ec7c51e9c49adcce4e0069b3e57de22d97bbcbaf6cfef4f39212","method":"","user_agent":"","ja3":"","session":"5722d8ad-07ab-4a22-ae21-c8d366a3c55f","seq":2,"duration_ms":21656,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"4d156488800b1120","label":"TLS/SSL","strings":["mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003'~�o\u001b��JZv�\u000f�'(�����\u0014��\u001bڜ-\u0016�\u0000�% \\\u000b�\u0015j+w�w\u0012d$1k#��\u000f��c���&BJ�����\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 a�,��F}N��_Z�\u0010y�\u0018N��\u0000.\u0010\u001fw�r�Ǝ�B","payload_hex":"16030100ee010000ea0303277ed66f1bebd64a5a76d20fce272898c3fffedb1483e41bda9c2d16bb00d925205c0bcb156a2b77e377126424316b23b6a60feeaf63f2f1aa26424adae8efbbfe000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d002061952c899a467d4eb8a85f5ad81079bc184e96ae002e101f77ec72d3c68eb342","method":"","user_agent":"","ja3":"","session":"54945f09-0ad9-4ea7-89c0-80a1a3b02637","seq":2,"duration_ms":22780,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"d2aaac4ce911f9e8","label":"TLS/SSL","strings":["d$1k#","mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u00036�Ƈ�\u001aYY\u0006Ʒ���H���}\u0017§�\u0003q5��ֱ�? H\u0017\u0000\u001f\u0006x舶\u000b\t>4�(#\\��i]\u0019��/�|�.s׭\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 \u0017)�\u0003���\u0000X]m?<\b�����~���Rz�s����U","payload_hex":"16030100ee010000ea03033693c687ca1a595906c6b7b5cfc748848ade7d17c2a7d5037135f4d0d6b1f23f204817001f0678e888b60b093e34cd28235cec8d695d19cff22faa7ca42e73d7ad000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d00201729b003fe9d8100585d6d3f3c08afaedefbae7ead8ed8527afd73bbffe2c555","method":"","user_agent":"","ja3":"","session":"d92c2639-714a-4989-b67f-dc3443ddcb3f","seq":2,"duration_ms":18972,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"32b928fafffae921","label":"TLS/SSL","strings":["mofami8.gochatyc.xyz","X]m?<"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}},{"timestamp":"2026-08-23T02:24:55","port":7928,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0000�\u0001\u0000\u0000�\u0003\u0003-j�G�\u0014�.\n��]�ur��'���pl�����湕m ��ŦL\u0014ʶ:C�\b�j6宀%��1\"��7�>2�XQ\u0000\f\u0013\u0001\u0013\u0002\u0013\u0003�/�0\u0000�\u0001\u0000\u0000�\u0000\u0000\u0000\u0019\u0000\u0017\u0000\u0000\u0014mofami8.gochatyc.xyz\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000\u0010\u0000\u0005\u0000\u0003\u0002h2\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000\b\u0000\u0006\u0004\u0003\b\u0004\u0004\u0001\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 vbܴ�\u0003{�Z;l�3r��9{@ϛa�}\t�X%\r��O","payload_hex":"16030100ee010000ea03032d6a9447d714c42e0ae8895de27572f0b1279e8ae9706cebc9c5dcc3e6b9956d20e683c5a64c14cab63a43ca08cb6a36e5ae8025ffa9312287bd37e13e328d5851000c130113021303c02fc03000ff010000950000001900170000146d6f66616d69382e676f6368617479632e78797a000b000403000102000a00160014001d0017001e00190018010001010102010301040010000500030268320016000000170000000d00080006040308040401002b00050403040303002d00020101003300260024001d00207662dcb4e2037ba55a3b6cfd3372c7d1397b40cf9b618c7d09d758250d9cd94f","method":"","user_agent":"","ja3":"","session":"a6c0f3f2-6a15-47d7-907c-3d251b3092a5","seq":2,"duration_ms":22244,"bytes_in":350,"bytes_out":30,"enriched":{"digest":"bac4f5edb7e8297c","label":"TLS/SSL","strings":["mofami8.gochatyc.xyz"],"iocs":{"domains":["mofami8.gochatyc.xyz"]}}}],"http_methods":[{"method":"GET","count":297}],"distinct_ports_total":1,"top_paths":[{"path":"https://mofami8.gochatyc.xyz/","count":276,"ports":1},{"path":"https://adm-a.gochatyc.xyz/","count":21,"ports":1}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[{"value":"mofami8.gochatyc.xyz","count":276},{"value":"adm-a.gochatyc.xyz","count":21}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":null,"tags":[],"data_as_of":"2026-08-24T11:05:33.800903+00:00"}