{"ip":"18.97.19.143","total_events":116,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,089 bytes sent","bytes_sent":10089,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-17T21:14:21","last_seen":"2026-09-29T02:51:47","events_24h":0,"events_7d":1,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-18-97-19-143.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":50035,"proto":"tcp","label":"","count":14},{"port":3306,"proto":"tcp","label":"MySQL","count":12},{"port":2079,"proto":"tcp","label":"","count":12},{"port":5001,"proto":"tcp","label":"","count":12},{"port":8291,"proto":"tcp","label":"","count":11},{"port":666,"proto":"tcp","label":"","count":11},{"port":50060,"proto":"tcp","label":"","count":11},{"port":502,"proto":"tcp","label":"","count":6},{"port":3001,"proto":"tcp","label":"","count":5},{"port":22222,"proto":"tcp","label":"","count":3},{"port":19200,"proto":"tcp","label":"","count":3},{"port":30002,"proto":"tcp","label":"","count":3},{"port":8090,"proto":"tcp","label":"","count":2},{"port":9868,"proto":"tcp","label":"","count":2},{"port":9090,"proto":"tcp","label":"Prometheus","count":1}],"fingerprints":{"ssh_hassh":["d6729b7f24428169e981ad4840063ca5"],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6","t13d041000_16476d049b0b_78f1d400d464","t13i3612h1_bcee18a5b459_8537cf56674e"],"tls_client_hello":"16030106130100060f03034e66cfa770920f487e295833abfab12cea8a2f3bfc194f71ade29dfeb7140cd220ff10b923ed62243d1eab7ed2cd3441cea8cb2ccc0bcd47afa0534a03d1da5c110048130213031301c02cc030c02bc02fcca9cca8009f009eccaac0adc0acc024c028c023c027c00ac014c009c013c09fc09e006b006700390033009d009cc09dc09c003d003c0035002f0100057eff01000100000b000403000102000a0012001011ec001d0017001e00180019010001010010000b000908687474702f312e31001600000017000000310000000d0036003409050906090404030503060308070808081a081b081c0809080a080b080408050806040105010601030303010302040205020602002b00050403040303002d00020101003304ea04e811ec04c0ef68c267b65c87c2a9385798134c10e538048ac176a52b042e952a3bbb71cc9743cabc1cf55423ce60a289eb04849853db15a4ecc87d5f220a4f842826c500e717266df545494b99e2d34d88469733f846fb42b2e7a30c8fda082dea9c02da4f8ab479908109add00dae79a249cb43b22406c291940fbb5fe2984df9129291921d84f5b2bbc177328b78ee8bc4472b6ebb6c4cdeca87c267a1969a66407bcb0fb42a2c1c3a6794ac45ca128875a0d3ba28c83c6bff3aca6f98063b1b033f3626e5556529bc7163e9c241d915ba72449cb54dfed04b353b9ad98cb03cb41d02395be11985bddbbdc69c94763ab261c7cb08e358803783de3b334378af479a7c8c28921b67277d6174b66b29899aa7a36683dd85a1acc228bd77cf657846a8941fb8a9387788b64a28c2d3614fcc8c755248a9046208e2415eb3c06914b927b3d941de75c591153e64e9ca895b09d1e0251bb686bbd4b534d5b2f62959c4847473daa35dc85bd8aa02d1390b3ee59b2cbb24f6154a2424842bba3694d5b62226c65aeaabaf248688ccba7a53b7b60244b5b5ab286792f4b09ef2bb53c0575fe8712b5aac17f0d7625e0653cf5c1f2449a04382ba992abfa64003265047e0d69f84a86ad7a5c6023526de58217945a4ea294d8d3c59085049753223de16acbeb363ab8b0980462adb134cbef12ef13c839af202fee2a3f61708eac1cde263c2b4766600c7787fb8271ce75e7f492f74a2a6791b5c86b62d0a400896a0671d458441db039ca8a6e197bfaa30c8265380eef4ac67855a2a949a7ae9c2754b4e26b5a270277637f81aca29c028138347c4789601c10296ab8c3795bd38473f34cfd8956e720c8c05764c6da6432c09b15cf51a3b461465a7263b305eed6c6f4b66680d2536a0f180c84bc763a7079f2a3b885bc07b8150f0a795f1b79a9a92af5fe38bd402a2280a3f09bc30da91aa9f1c189c0c1fb650cce3e7820a5ba9353460cbb53e600b5f8b10a7ff72504ae35beac51c7f53c5e9e562ab903989b09bad52c680c76651492a34214c6896222118821e519a7e7bb8d11a4ca3423a925b253617823f31b3589b4e5ae3cc5b02c24a5988d54a72d8c535b61b43a71b26aecc4c70f217674786f045a8fbc1409ebc492e1a8b0b591ff3874877758eef576887117e9562085c3ba99c6c1ab27c75560a4e37e402578b39b4031187e94ede75b3c2a646a501bc47b77a0641aba4e2831d401f2c1707ab9b7b3fd39c41466b70b1213126ca8bb39921b3a855eb51d711ab3e5153a0826a5f6831e7b48c1fea6a8f9554e87a826650749d0625904267963b9f20b9c4dbe282e21b80b8a59e94a316a397bf141b2226a925d178052cb1689650bab48bbb4ada4ffdfcb348aa79b9ab1358d9bff42631f8aa17784360f62bb3dc50b4fb7466212c671ac642cda6a75549b62cfcb1bbab79f8bab647673936797e4396856b614f3e1b01a0f9511d87208a51a21dc9a54e4235a7e69a1ec186ac427cecb86e01d28ab64386e9ab86995c0dd558846cf4256de30dff9a1e23142d9ca36df0d2c36e1c7e1a484f340a1a5491538bb43f200020b2210962c128d1c73e1c8731c2101eb491c60f9a42a17132635489af6646ec08b33819614e106c170bf0e1c9830d722d32d4882e7984d9d69daf15e8b515e127c1d41fb5967479bf73d68d36726e09f28272ab3913d9256e7d0d1d001d00202f03c6697cdbdefa3bc73c8c41c681c27e6d109d91df6af4dc7ed40890f02440001b000504000100","tls_ja3":["d18b223ce817c861b7829130500395c2","a66e498c488aa0523759691248cdfb01"],"http_akin":["b11cun061_00050013_f5830403_x0659","b11cun050_00040017_345c845b","b11cuq070_00050817_bad9ef97","b11cun050_00040017_976354f0"]},"fingerprint_peers":{"t13i4311h1_c7886603b240_b26ce05bbdd6":14,"t13d041000_16476d049b0b_78f1d400d464":128,"t13i3612h1_bcee18a5b459_8537cf56674e":299,"d6729b7f24428169e981ad4840063ca5":132,"b11cun061_00050013_f5830403_x0659":52,"b11cun050_00040017_345c845b":469,"b11cuq070_00050817_bad9ef97":17,"b11cun050_00040017_976354f0":1282},"akin_families":{"b11cun050_00040017_345c845b":{"head":"b11cun050_00040017_345c845b","shapes":2,"ips":468},"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":3,"ips":1283}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3079.112 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","elasticsearch-py/7.13.4 (Python 3.10.21)","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3032.96 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3031.77 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3008.104 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3061.101 Safari/537.32"],"timeline":[{"date":"2026-07-04","count":2},{"date":"2026-07-15","count":1},{"date":"2026-07-16","count":3},{"date":"2026-07-30","count":1},{"date":"2026-08-04","count":2},{"date":"2026-08-10","count":3},{"date":"2026-08-14","count":12},{"date":"2026-09-04","count":5},{"date":"2026-09-08","count":1},{"date":"2026-09-09","count":3},{"date":"2026-09-12","count":1},{"date":"2026-09-21","count":2},{"date":"2026-09-29","count":1}],"recent_events":[{"timestamp":"2026-09-29T02:51:47","port":873,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"@RSYNCD: 29\r\n\r\n","payload_hex":"405253594e43443a2032390d0a0d0a","method":"","user_agent":"","ja3":"","session":"58f054df-8020-401c-a4eb-13e069b6e573","seq":1,"duration_ms":100,"bytes_in":15,"bytes_out":12,"enriched":{"digest":"811ff0e711f39b8c","strings":["@RSYNCD: 29"]}},{"timestamp":"2026-09-21T19:11:02","port":8090,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8090\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3032.96 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383039300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35352e302e333033322e3936205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3032.96 Safari/537.32","ja3":"","session":"a810e051-c52f-4641-be7c-5da390f0e529","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":77},{"timestamp":"2026-09-21T19:11:01","port":8090,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3079.112 Safari/537.32\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3079.112 Safari/537.32","ja3":"d18b223ce817c861b7829130500395c2","session":"578de3a2-863b-440a-9799-3b3a52de9ff8","seq":1,"duration_ms":101,"bytes_in":431,"bytes_out":77},{"timestamp":"2026-09-12T17:14:50","port":5005,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5005\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3008.104 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35372e302e333030382e313034205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3008.104 Safari/537.32","ja3":"","session":"c09390fb-c7f6-4406-9253-b185e67818ca","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":77},{"timestamp":"2026-09-09T03:11:12","port":19200,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:19200\",\"user-agent\":\"elasticsearch-py/7.13.4 (Python 3.10.21)\",\"x-elastic-client-meta\":\"es=7.13.4,py=3.10.21,t=7.13.4,ur=1.26.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393230300d0a4163636570742d456e636f64696e673a206964656e746974790d0a636f6e6e656374696f6e3a206b6565702d616c6976650d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a757365722d6167656e743a20656c61737469637365617263682d70792f372e31332e342028507974686f6e20332e31302e3231290d0a782d656c61737469632d636c69656e742d6d6574613a2065733d372e31332e342c70793d332e31302e32312c743d372e31332e342c75723d312e32362e31310d0a0d0a","method":"GET","user_agent":"elasticsearch-py/7.13.4 (Python 3.10.21)","ja3":"","session":"1431f876-0846-4ff2-bc16-ec729f1c8f8b","seq":1,"duration_ms":100,"bytes_in":246,"bytes_out":77},{"timestamp":"2026-09-09T03:11:12","port":19200,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:19200\",\"user-agent\":\"elasticsearch-py/7.13.4 (Python 3.10.21)\",\"x-elastic-client-meta\":\"es=7.13.4,py=3.10.21,t=7.13.4,ur=1.26.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_alias","summary":"","payload_hex":"474554202f5f616c69617320485454502f312e310d0a486f73743a20<HONEYPOT>3a31393230300d0a4163636570742d456e636f64696e673a206964656e746974790d0a636f6e6e656374696f6e3a206b6565702d616c6976650d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a757365722d6167656e743a20656c61737469637365617263682d70792f372e31332e342028507974686f6e20332e31302e3231290d0a782d656c61737469632d636c69656e742d6d6574613a2065733d372e31332e342c70793d332e31302e32312c743d372e31332e342c75723d312e32362e31310d0a0d0a","method":"GET","user_agent":"elasticsearch-py/7.13.4 (Python 3.10.21)","ja3":"","session":"1431f876-0846-4ff2-bc16-ec729f1c8f8b","seq":2,"duration_ms":223,"bytes_in":498,"bytes_out":154},{"timestamp":"2026-09-09T03:11:12","port":19200,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:19200\",\"user-agent\":\"elasticsearch-py/7.13.4 (Python 3.10.21)\",\"x-elastic-client-meta\":\"es=7.13.4,py=3.10.21,t=7.13.4,ur=1.26.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/*","summary":"","payload_hex":"474554202f2a20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393230300d0a4163636570742d456e636f64696e673a206964656e746974790d0a636f6e6e656374696f6e3a206b6565702d616c6976650d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a757365722d6167656e743a20656c61737469637365617263682d70792f372e31332e342028507974686f6e20332e31302e3231290d0a782d656c61737469632d636c69656e742d6d6574613a2065733d372e31332e342c70793d332e31302e32312c743d372e31332e342c75723d312e32362e31310d0a0d0a","method":"GET","user_agent":"elasticsearch-py/7.13.4 (Python 3.10.21)","ja3":"","session":"1431f876-0846-4ff2-bc16-ec729f1c8f8b","seq":3,"duration_ms":346,"bytes_in":745,"bytes_out":231},{"timestamp":"2026-09-08T00:50:15","port":1900,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1900\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3031.77 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313930300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35332e302e333033312e3737205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3031.77 Safari/537.32","ja3":"","session":"ec0de47f-1906-4bd2-9d11-79fb20faeed6","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":77},{"timestamp":"2026-09-04T04:35:28","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3001\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"6f16ba4f-57a7-48c9-b802-95b30a7265cf","seq":1,"duration_ms":101,"bytes_in":234,"bytes_out":77},{"timestamp":"2026-09-04T04:35:28","port":3001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3061.101 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f36302e302e333036312e313031205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3061.101 Safari/537.32","ja3":"","session":"4a5f70c5-12cb-4355-8457-b970ccbdc266","seq":1,"duration_ms":101,"bytes_in":237,"bytes_out":77}],"http_methods":[{"method":"GET","count":36},{"method":"POST","count":2}],"distinct_ports_total":23,"top_paths":[{"path":"/","count":34,"ports":21},{"path":"/mcp","count":2,"ports":1},{"path":"/_alias","count":1,"ports":1},{"path":"/*","count":1,"ports":1}],"distinct_paths_total":4,"top_snis":[],"top_hosts":[{"value":"localhost","count":3}],"top_alpns":[{"value":"http/1.1","count":12}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Dnt","Host","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*; q=0.01","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"localhost","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3079.112 Safari/537.32","notable":false}],"distinct_sets":3,"events_with_headers":9},"tags":[],"data_as_of":"2026-09-30T18:04:19.986165+00:00"}