{"ip":"18.97.26.76","data_as_of":"2026-10-23T09:58:22+00:00","observed":true,"total_events":117,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["The address is in a published scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled by operator and carry no threat verdict.","Counts include 7 interactive session(s) as well as first-packet events."],"engagement":{"level":"payload","label":"Sustained payload","detail":"7,702 bytes sent","bytes_sent":7702,"session_seconds":5,"persistent":false},"basis":"combined"},"first_seen":"2026-03-27T11:31:12","last_seen":"2026-10-23T06:37:01","events_24h":0,"events_7d":0,"interactive_sessions":7,"interactive_sessions_24h":1,"interactive_sessions_7d":7,"interactive_protocols":[{"protocol":"sccp","sessions":6},{"protocol":"mysql","sessions":1}],"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-18-97-26-76.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"udp":null,"interaction":{"window_days":90,"sessions":7,"first_seen":"2026-10-22T08:14:48","last_seen":"2026-10-23T06:37:01","verdicts":[{"verdict":"scan","sessions":6},{"verdict":"unknown","sessions":1}],"personas":[{"persona":"sccp@CUCM 11.5","sessions":6},{"persona":"mysql@8.0.33","sessions":1}],"services":[{"protocol":"sccp","port":2000,"sessions":6},{"protocol":"mysql","port":3306,"sessions":1}],"logins":[],"commands":[],"downloads":[],"files":[],"attack":[{"technique_id":"T1595","technique_name":"Active Scanning","tactic_id":"TA0043","tactic_name":"Reconnaissance","sessions":6}]},"top_ports":[{"port":9200,"proto":"tcp","label":"Elastic","count":16,"sessions":0},{"port":10443,"proto":"tcp","label":"","count":12,"sessions":0},{"port":143,"proto":"tcp","label":"IMAP","count":12,"sessions":0},{"port":8083,"proto":"tcp","label":"","count":11,"sessions":0},{"port":4000,"proto":"tcp","label":"","count":11,"sessions":0},{"port":888,"proto":"tcp","label":"","count":11,"sessions":0},{"port":5601,"proto":"tcp","label":"Kibana","count":10,"sessions":0},{"port":7001,"proto":"tcp","label":"WebLogic","count":10,"sessions":0},{"port":2000,"proto":"tcp","label":"SCCP","count":0,"sessions":6},{"port":22222,"proto":"tcp","label":"","count":3,"sessions":0},{"port":1883,"proto":"tcp","label":"MQTT","count":3,"sessions":0},{"port":1801,"proto":"tcp","label":"","count":3,"sessions":0},{"port":2222,"proto":"tcp","label":"SSH-alt","count":3,"sessions":0},{"port":5672,"proto":"tcp","label":"","count":2,"sessions":0},{"port":20,"proto":"tcp","label":"","count":2,"sessions":0}],"fingerprints":{"ssh_hassh":["d6729b7f24428169e981ad4840063ca5"],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6","t13d041000_16476d049b0b_78f1d400d464","t13i3612h1_bcee18a5b459_8537cf56674e","t13i911100_0d5420ba6086_87b33ccefea8"],"tls_client_hello":"16030100e8010000e40303d4ceab23f83ecadda3480d773d1fa3be62918157bc5e34e1f07167db1dd3b9db2080f30bee35e2679521286927304e61119b9650c43a5d1da2ab6937a4a82304d1000813021303130100ff0100009300000012001000000d3139322e332e3131382e313436000b000403000102000a000c000a001d0017001e00190018002300000016000000170000000d001e001c040305030603080708080809080a080b080408050806040105010601002b0003020304002d00020101003300260024001d00206ed78ca76c627753bd403cda8c27acaca905e0a01cd1407fe9fb90d380d28f0d","tls_ja3":["d18b223ce817c861b7829130500395c2","f80d3d09f61892c5846c854dd84ac403","a66e498c488aa0523759691248cdfb01","da472575d3ad6f060581fbbad76c09d6"],"http_akin":["b11cun061_00050013_f5830403_x0659","b11cun050_00040017_345c845b","b11cun120_011403df_782553ac","b11cun050_00040017_976354f0"],"interactive":{"ssh_hassh":[],"tls_ja4":["t13i3612h1_bcee18a5b459_8537cf56674e","t13i911100_0d5420ba6086_87b33ccefea8"],"tls_ja3":["d18b223ce817c861b7829130500395c2","da472575d3ad6f060581fbbad76c09d6"]}},"fingerprint_peers":{"t13i3612h1_bcee18a5b459_8537cf56674e":309,"t13i911100_0d5420ba6086_87b33ccefea8":0,"b11cun061_00050013_f5830403_x0659":65,"b11cun120_011403df_782553ac":240,"b11cun050_00040017_976354f0":1239,"t13i4311h1_c7886603b240_b26ce05bbdd6":24,"t13d041000_16476d049b0b_78f1d400d464":137,"d6729b7f24428169e981ad4840063ca5":141,"b11cun050_00040017_345c845b":494},"akin_families":{"b11cun050_00040017_345c845b":{"head":"b11cun050_00040017_345c845b","shapes":2,"ips":494},"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1238}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3030.89 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3021.85 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3085.70 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3094.56 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3088.60 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3060.106 Safari/537.32"],"timeline":[{"date":"2026-07-27","count":2,"sessions":0},{"date":"2026-09-07","count":1,"sessions":0},{"date":"2026-10-02","count":1,"sessions":0},{"date":"2026-10-11","count":3,"sessions":0},{"date":"2026-10-14","count":12,"sessions":0},{"date":"2026-10-22","count":0,"sessions":6},{"date":"2026-10-23","count":0,"sessions":1}],"recent_events":[{"timestamp":"2026-10-22T08:14:54","port":2000,"proto":"tcp","app_proto":"sccp","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0002\u0000\u0001\u0000\u0001�\u0003\u0003�.��d�=�*�*���J\u0003��������b��~3\u0014�\u0005 Щ+�=bl\u001f'F�4�e�#7���j\u0001\u001e�����N~�\u0019\u0000�\u0013\u0002\u0013\u0003\u0013\u0001�,�0\u0000�\u0000�̨̩̪�����]�a�W�S\u0000��+�/\u0000�\u0000������\\�`�V�R\u0000����������$�(\u0000k\u0000j�s�w\u0000�\u0000�\u0000m\u0000��#�'\u0000g\u0000@�r�v\u0000�\u0000�\u0000l\u0000��\n�\u0014\u00009\u00008\u0000�\u0000��\u0019\u0000:\u0000��\t�\u0013\u00003\u00002\u0000�\u0000�\u0000E\u0000D�\u0018\u00004\u0000�\u0000F\u0000����Q\u0000����P����\u0000=\u0000�\u0000<\u0000�\u00005\u0000�\u0000/\u0000�\u0000A\u0000�\u0001\u0000\u0000�\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0016\u0000\u0014\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0019\u0000\u0018\u0001\u0000\u0001\u0001\u0001\u0002\u0001\u0003\u0001\u0004\u0000#\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u00006\u00004\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\u001a\b\u001b\b\u001c\b\t\b\n\b\u000b\b\u0004\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0003\u0003\u0002\u0003\u0003\u0001\u0002\u0001\u0003\u0002\u0002\u0002\u0004\u0002\u0005\u0002\u0006\u0002\u0000+\u0000\t\b\u0003\u0004\u0003\u0003\u0003\u0002\u0003\u0001\u0000-\u0000\u0002\u0001\u0001\u00003\u0000&\u0000$\u0000\u001d\u0000 ��{��\u001bx�^�[\u0013~\u0019��\u001f��*\u0013?�Z\u0019��\u0012c^�\f\u0000\u001b\u0000\u0005\u0004\u0000\u0001\u0000\u0003\u0000\u0015\u0000K\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"da472575d3ad6f060581fbbad76c09d6","session":"b8627a4c-05fe-422b-9501-e4b65d773a18-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"8e28fd139cca3a0c","label":"TLS/SSL"},"interactive":true},{"timestamp":"2026-10-22T08:14:54","port":2000,"proto":"tcp","app_proto":"sccp","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET / HTTP/1.1\r\nHost: <HONEYPOT>:2000\r\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\r\nAccept-encoding: gzip\r\nAccept: */*\r\nConnection: keep-alive\r\n\r\n","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a323030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"aafc8603-60ff-42f0-b6e0-f6599cedc3df-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"df62589761727483","label":"HTTP","strings":["GET / HTTP/1.1","Host: <HONEYPOT>:2000","User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (…","Accept-encoding: gzip","Accept: */*","Connection: keep-alive"]},"interactive":true},{"timestamp":"2026-10-22T08:14:49","port":2000,"proto":"tcp","app_proto":"sccp","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0006\u0013\u0001\u0000\u0006\u000f\u0003\u0003�a\u0011m��\u0014������\u0017��*�ë�\u0006]\u000e�\u00121��*�� %q�\u0016-��Yd\u0014��\u0006�\u001d�Jk��ZLd4�\u0000*�\u0000�V�\u0000H\u0013\u0002\u0013\u0003\u0013\u0001�,�0�+�/̨̩\u0000�\u0000�̪�����$�(�#�'�\n�\u0014�\t�\u0013����\u0000k\u0000g\u00009\u00003\u0000�\u0000�����\u0000=\u0000<\u00005\u0000/\u0001\u0000\u0005~�\u0001\u0000\u0001\u0000\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0012\u0000\u0010\u0011�\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0018\u0000\u0019\u0001\u0000\u0001\u0001\u0000\u0010\u0000\u000b\u0000\t\bhttp/1.1\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u00001\u0000\u0000\u0000\r\u00006\u00004\t\u0005\t\u0006\t\u0004\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\u001a\b\u001b\b\u001c\b\t\b\n\b\u000b\b\u0004\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0003\u0003\u0003\u0001\u0003\u0002\u0004\u0002\u0005\u0002\u0006\u0002\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0004�\u0004�\u0011�\u0004�W\"m�g��;\u001a�H\r�EJ��\u000f2�kN��q������[\u00050�?�\u0014�v�cN�\u001f�q[\u000bho�V/j���b�\u0012\"�r�`�hR;EE�%��8\u000bnu���OEc1�Fe�5���q���QW�.JH�`�v(\u0005��>ЬB�s��5O\u0004�V�k�\u001dۭ�\u001aI�zC� f�V\u001e\u0003�HH�T��,��2\u0005h Di\u0002\n��\"���e�dL�>\u0004���\u0013��\f{\u0001\"#�~8\u0011ro\u0018�\u0007�C�w�\u0012�_��\u0013/P�#KCl�v�+P>�WO�%à|�t�%\u0010*\u000b'/\u0007� ��6/8n��\u0016�3j}�\u0003p�̲�\u0011�P.\u0019\u001bd&JK��0@��c !u��(\u0018%\u001c�wI�B\u000f�,\u0005p�,b���:[4�A�WE\u0018;�sA��\u0019�I��(\u0005>�}��b�\u0000Q�!C��).�6�S\u001e/ܷJ\bx]�[��nwP�{!�@�:����e��\u0001:A\f{��y��1@��j\u0007��VǯW/��\rj���\u0012�@\u00115�W����\"\u0017\u0014�'��™5�\r���\u00144\u001a��+\n�^W����[�ւ��OA�\n��\u000b��@X�\"��H��Kl�q�G��E�o�,w&�E%��\u0000\fQ����˴1����!\u001c���|����\u0006��и6f�b����o\u001fd\"�i��\u0010YM��\u000f؛x�gjY���E��\u0011v�n7ǃaz��\ftE�u��.��<$��중��e����L��\u001e�\u0003,\u0014�:_�~i\u0016��\u0015XI+���?e�8�v�v;�)*�J6k�Z\bR�\u0010Q�$�|,���,I�<!'E��Dș�*�9X�U���\u0004���\u0015xc���k�\r\u000b��uj�*�.8�\u001f�$i5�Z�0\u001fK�V_l\u0011��'\u001egp�6\u001e\u000f&���S3+j:Є(I����p�\r]a>�'{�\u0019�psYTw~��y\u0010F\n��VI`z�Ya���HE��Jx2���u�}9�{���B�\t�̿�1�&\u0002��c\u001f�w$�̊E\u001fJI\u000f'�ZH�q_����\t�[W\u0005V\u0003pՒ�Xv�\u0019�g\u0019\u000b\u0012�.�I��I��!���n�5B�K��w!�;\u0013\u001fz0\u0019���\u0004�d���7b��\u0014�\\\\Jw}J�bx{G\u0012s� x��0\u0010�&��(�׌�\u0005�\f�\u001cZ\"��&�9�a]6Ђ�kS�����E�����O������\u000b��sۢ�z5��\u001e?!mMԷ�\u0017uw3L_Ƥ=\u001b/\u0018'��0��\u000b�\u001c\u0004Šj\u0017��H�Œ(�H\u001d�\u0017ӥ9T�I�\u001c�v\u0003�:�\"n3-�;\u0019\u000e�N�*k�d��\u0018c\u001a\u0010�\u0013\u0011W�tX\bp\b���Љ(�ꁐ�9\u0001����`��.����e]��?\t0��6��Yʵ�\u0015�s���6I�7�|f8{��4l\u0019�-�\u00156\n;�ٜWK{���g��;\re�&lk����\u0011\u0019�^(Q�a+'I%\u0014�Nٌ\bQ[��\u0016\u0014+�\u000e�38��*1�'g-�ء����\u0002T?^�\u001eŔqJ���\n�L���r\u0000\u001d\u0000 �d�\u0019�N>\u0016\u0019=6躪Ğ\u0016K�$��\\F�(P�b31\u0005\u0000\u001b\u0000\u0005\u0004\u0000\u0001\u0000\u0003","payload_hex":"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","method":"","user_agent":"","ja3":"d18b223ce817c861b7829130500395c2","session":"f8d75ca6-700b-404d-b229-11afacc0b2d1-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"dac20153cb9c39ae","label":"TLS/SSL","strings":["ZLd4","http/1.1","hR;EE","OEc1","h Di","#KCl","6/8n","d&JK","c !u","<!'E"]},"interactive":true},{"timestamp":"2026-10-22T08:14:49","port":2000,"proto":"tcp","app_proto":"sccp","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET / HTTP/1.1\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3043.51 Safari/537.32\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\nHost: localhost\r\n\r\n","payload_hex":"474554202f20485454502f312e310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35302e302e333034332e3531205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a486f73743a206c6f63616c686f73740d0a0d0a","method":"","user_agent":"","ja3":"","session":"68179f82-8cd4-410b-97ad-4047b2ecad3f-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"18571fa62a2a8a22","label":"HTTP","strings":["GET / HTTP/1.1","User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, liv…","Accept-Encoding: gzip, deflate","Accept: */*","Connection: keep-alive","Host: localhost"]},"interactive":true},{"timestamp":"2026-10-22T08:14:48","port":2000,"proto":"tcp","app_proto":"sccp","app_protocol":"http","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"GET / HTTP/1.1\r\nHost: <HONEYPOT>:2000\r\nUser-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3043.51 Safari/537.32\r\nAccept-Encoding: gzip, deflate\r\nAccept: */*\r\nConnection: keep-alive\r\n\r\n","payload_hex":"474554202f20485454502f312e310d0a486f73743a203c484f4e4559504f543e3a323030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35302e302e333034332e3531205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"","user_agent":"","ja3":"","session":"6371365b-3b58-4818-8328-84722e9c50d2-1","seq":1,"duration_ms":0,"bytes_in":0,"bytes_out":0,"enriched":{"digest":"d9cbcd2e53804a7a","label":"HTTP","strings":["GET / HTTP/1.1","Host: <HONEYPOT>:2000","User-Agent: Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, liv…","Accept-Encoding: gzip, deflate","Accept: */*","Connection: keep-alive"]},"interactive":true},{"timestamp":"2026-10-14T07:29:45","port":10443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0003\u0001\u0000\u0002\u0002P","payload_hex":"15030100020250","method":"","user_agent":"","ja3":"","session":"ef0e0b3a-e2c5-4370-96a0-7385e4b1fea3","seq":1,"duration_ms":0,"bytes_in":7,"bytes_out":11},{"timestamp":"2026-10-14T07:29:43","port":10443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0015\u0003\u0001\u0000\u0002\u0002P","payload_hex":"15030100020250","method":"","user_agent":"","ja3":"","session":"57b6f20f-bbac-4718-b28e-56ad6eb318a5","seq":1,"duration_ms":0,"bytes_in":7,"bytes_out":11},{"timestamp":"2026-10-14T07:29:40","port":10443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001c\u0001\u0000\u0002\u0000\u0003\u0000\u0000\u0000\u0010\u0004\u0000�\u0017�A���a�2��t��T�","payload_hex":"801c010002000300000010040080179441ba85e261c332ccee7490ff5492","method":"","user_agent":"","ja3":"","session":"cecf44bd-744d-405f-911f-405410672405","seq":1,"duration_ms":100,"bytes_in":30,"bytes_out":11},{"timestamp":"2026-10-14T07:29:35","port":10443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001c\u0001\u0000\u0002\u0000\u0003\u0000\u0000\u0000\u0010\u0006\u0000@ˀro��\u0017&(\\$p\u00038�#","payload_hex":"801c010002000300000010060040cb80726fa5981726285c24700338a523","method":"","user_agent":"","ja3":"","session":"0356f2a6-b67e-4c5f-b80c-d37d0946bffe","seq":1,"duration_ms":100,"bytes_in":30,"bytes_out":11,"enriched":{"digest":"25028a94f81ad0c1","strings":["&(\\$p"]}},{"timestamp":"2026-10-14T07:29:35","port":10443,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u001c\u0001\u0000\u0002\u0000\u0003\u0000\u0000\u0000\u0010\u0001\u0000�\u000f�K\u0005Jq@&�}�te\t7\u0014","payload_hex":"801c0100020003000000100100800fcc4b054a714026987df87465093714","method":"","user_agent":"","ja3":"","session":"683b9520-e4e1-420b-85ec-117629bad2be","seq":1,"duration_ms":100,"bytes_in":30,"bytes_out":11,"enriched":{"digest":"2bd31efe2edd848f","strings":["Jq@&"]}}],"http_methods":[{"method":"GET","count":24}],"distinct_ports_total":23,"top_paths":[{"path":"/","count":24,"ports":17}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"localhost","count":1}],"top_alpns":[{"value":"http/1.1","count":11}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":2}],"credentials":[],"header_profile":null,"tags":[]}