{"ip":"18.97.26.108","total_events":89,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"7,376 bytes sent","bytes_sent":7376,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-26T11:10:55","last_seen":"2026-09-22T01:36:22","events_24h":0,"events_7d":3,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-18-97-26-108.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":1200,"proto":"tcp","label":"","count":16},{"port":19888,"proto":"tcp","label":"","count":12},{"port":2083,"proto":"tcp","label":"","count":11},{"port":5357,"proto":"tcp","label":"","count":11},{"port":50001,"proto":"tcp","label":"","count":11},{"port":22,"proto":"tcp","label":"SSH","count":3},{"port":20000,"proto":"tcp","label":"","count":3},{"port":6379,"proto":"tcp","label":"Redis","count":3},{"port":24442,"proto":"tcp","label":"","count":3},{"port":5223,"proto":"tcp","label":"","count":3},{"port":5432,"proto":"tcp","label":"Postgres","count":3},{"port":50060,"proto":"tcp","label":"","count":2},{"port":50091,"proto":"tcp","label":"","count":2},{"port":3128,"proto":"tcp","label":"HTTP-proxy","count":2},{"port":8088,"proto":"tcp","label":"Hadoop","count":2}],"fingerprints":{"ssh_hassh":["d6729b7f24428169e981ad4840063ca5"],"tls_ja4":["t13i171100_ab0a1bf427ad_ecd0401ec68b","t13i4311h1_c7886603b240_b26ce05bbdd6","t13i3612h1_bcee18a5b459_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["d18b223ce817c861b7829130500395c2","1987606153939a4c0ccc1465ecf8e431"],"http_akin":[]},"fingerprint_peers":{"t13i171100_ab0a1bf427ad_ecd0401ec68b":69,"t13i4311h1_c7886603b240_b26ce05bbdd6":21,"t13i3612h1_bcee18a5b459_8537cf56674e":301,"d6729b7f24428169e981ad4840063ca5":148},"akin_families":{},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3108.71 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3100.51 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3104.99 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3107.106 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3090.94 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3044.89 Safari/537.32"],"timeline":[{"date":"2026-07-02","count":3},{"date":"2026-07-04","count":1},{"date":"2026-07-23","count":1},{"date":"2026-07-25","count":2},{"date":"2026-07-28","count":3},{"date":"2026-08-04","count":2},{"date":"2026-08-30","count":2},{"date":"2026-09-09","count":5},{"date":"2026-09-14","count":3},{"date":"2026-09-22","count":3}],"recent_events":[{"timestamp":"2026-09-22T01:36:22","port":5223,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5223\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353232330d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"f36ee5f4-592d-43dd-a7d3-ae3b28120489","seq":1,"duration_ms":100,"bytes_in":234,"bytes_out":77},{"timestamp":"2026-09-22T01:36:22","port":5223,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5223\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3108.71 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353232330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f36302e302e333130382e3731205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3108.71 Safari/537.32","ja3":"","session":"f65b11ad-f592-48a4-b41d-0ef4e36508f9","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":77},{"timestamp":"2026-09-22T01:36:17","port":5223,"proto":"tcp","app_proto":"tls","app_protocol":"jabber","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"<?xml version='1.0'?><stream:stream xmlns:stream='http://etherx.jabber.org/streams'id='1'xmlns='jabber:client' from='localhost'>","payload_hex":"3c3f786d6c2076657273696f6e3d27312e30273f3e3c73747265616d3a73747265616d20786d6c6e733a73747265616d3d27687474703a2f2f6574686572782e6a61626265722e6f72672f73747265616d732769643d273127786d6c6e733d276a61626265723a636c69656e74272066726f6d3d276c6f63616c686f7374273e","method":"","user_agent":"","ja3":"1987606153939a4c0ccc1465ecf8e431","session":"626d2b35-9a85-4902-bc2d-42a243429ac2","seq":1,"duration_ms":120,"bytes_in":128,"bytes_out":12,"enriched":{"digest":"956bfc43538d1489","label":"SOAP/XML","strings":["<?xml version='1.0'?><stream:stream xmlns:stream='http://etherx.jabber.org/strea…"],"iocs":{"urls":["http://etherx.jabber.org/strea…"],"domains":["etherx.jabber.org"],"paths":["/etherx.jabber.org/strea"]}}},{"timestamp":"2026-09-14T19:58:44","port":22,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:22\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32320d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"5abd380a-083d-4acd-bb74-0c27d0c6d66b","seq":1,"duration_ms":100,"bytes_in":232,"bytes_out":77},{"timestamp":"2026-09-14T19:58:44","port":22,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:22\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3090.94 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35332e302e333039302e3934205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3090.94 Safari/537.32","ja3":"","session":"b3152a12-b48b-458f-91de-45e4d09ff011","seq":1,"duration_ms":100,"bytes_in":234,"bytes_out":77},{"timestamp":"2026-09-14T19:58:39","port":22,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-paramiko_2.9.2\r\n\u0000\u0000\u0003�\u0005\u0014a���(\u0019{�r�\u0004R���6\u0000\u0000\u0001\u001bcurve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c\u0000\u0000\u0000qssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss\u0000\u0000\u0000Waes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc\u0000\u0000\u0000Waes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc\u0000\u0000\u0000�hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000�hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"30f2ead4-6631-4902-83cb-09cb9e3e0707","seq":1,"duration_ms":121,"bytes_in":936,"bytes_out":12,"enriched":{"digest":"ebfafc00671660fe","label":"SSH","strings":["SSH-2.0-paramiko_2.9.2","curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nis…","qssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha…","Waes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,…","hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@open…","none"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-09-09T22:13:23","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3100.51 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3100.51 Safari/537.32","ja3":"","session":"085c1cb4-c89b-4372-81ef-43fa116ebb7b","seq":1,"duration_ms":100,"bytes_in":430,"bytes_out":77},{"timestamp":"2026-09-09T22:13:23","port":8088,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8088\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3104.99 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383038380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35362e302e333130342e3939205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3104.99 Safari/537.32","ja3":"","session":"d035acdf-e00c-4473-85c8-ceff666cef89","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":77},{"timestamp":"2026-09-09T05:08:09","port":24442,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:24442\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32343434320d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"3016a213-ee70-4090-93cf-a7ff3ac47e9a","seq":1,"duration_ms":101,"bytes_in":235,"bytes_out":77},{"timestamp":"2026-09-09T05:08:09","port":24442,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:24442\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3107.106 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a32343434320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35372e302e333130372e313036205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3107.106 Safari/537.32","ja3":"","session":"1f9a1833-8e31-4c0a-8b4e-e94c7b2b3db1","seq":1,"duration_ms":101,"bytes_in":238,"bytes_out":77}],"http_methods":[{"method":"GET","count":28}],"distinct_ports_total":17,"top_paths":[{"path":"/","count":28,"ports":17}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"localhost","count":3}],"top_alpns":[{"value":"http/1.1","count":7}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":2}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Dnt","Host","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*; q=0.01","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"localhost","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3100.51 Safari/537.32","notable":false}],"distinct_sets":2,"events_with_headers":8},"tags":[],"data_as_of":"2026-09-24T12:55:07.693812+00:00"}