{"ip":"18.97.5.87","total_events":63,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"4,176 bytes sent","bytes_sent":4176,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-28T22:22:41","last_seen":"2026-09-24T04:57:07","events_24h":2,"events_7d":6,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-18-97-5-87.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":22222,"proto":"tcp","label":"","count":13},{"port":9100,"proto":"tcp","label":"Printer","count":11},{"port":7547,"proto":"tcp","label":"TR-069","count":11},{"port":4443,"proto":"tcp","label":"","count":10},{"port":1022,"proto":"tcp","label":"","count":3},{"port":19890,"proto":"tcp","label":"","count":2},{"port":19888,"proto":"tcp","label":"","count":2},{"port":9870,"proto":"tcp","label":"","count":2},{"port":47001,"proto":"tcp","label":"","count":1},{"port":40000,"proto":"tcp","label":"","count":1},{"port":2002,"proto":"tcp","label":"","count":1},{"port":11211,"proto":"tcp","label":"Memcached","count":1},{"port":1900,"proto":"tcp","label":"","count":1},{"port":179,"proto":"tcp","label":"BGP","count":1},{"port":9002,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":["d6729b7f24428169e981ad4840063ca5"],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6","t13i3612h1_bcee18a5b459_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["d18b223ce817c861b7829130500395c2"],"http_akin":["a11cun121_0000e95f_b585e99d","a11cun050_0000004f_0d8a8ff5"]},"fingerprint_peers":{"t13i3612h1_bcee18a5b459_8537cf56674e":302,"t13i4311h1_c7886603b240_b26ce05bbdd6":22,"d6729b7f24428169e981ad4840063ca5":149,"a11cun121_0000e95f_b585e99d":12,"a11cun050_0000004f_0d8a8ff5":178},"akin_families":{"a11cun050_0000004f_0d8a8ff5":{"head":"a11cun050_0000004f_0d8a8ff5","shapes":2,"ips":178}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3102.103 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3076.89 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3099.62 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3059.92 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3059.97 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3039.81 Safari/537.32"],"timeline":[{"date":"2026-08-11","count":1},{"date":"2026-08-12","count":1},{"date":"2026-08-18","count":1},{"date":"2026-09-19","count":1},{"date":"2026-09-21","count":3},{"date":"2026-09-24","count":2}],"recent_events":[{"timestamp":"2026-09-24T04:57:07","port":19890,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3076.89 Safari/537.32\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3076.89 Safari/537.32","ja3":"d18b223ce817c861b7829130500395c2","session":"6cdd6afc-ff34-4854-803e-72bd6bf2c90b","seq":1,"duration_ms":100,"bytes_in":430,"bytes_out":75},{"timestamp":"2026-09-24T04:57:07","port":19890,"proto":"tcp","app_proto":"","app_protocol":"http","host":"185.228.81.201","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"185.228.81.201:19890\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3102.103 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203138352e3232382e38312e3230313a31393839300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35322e302e333130322e313033205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3102.103 Safari/537.32","ja3":"","session":"0701f843-3e84-49ec-9550-d85fecc0c0d1","seq":1,"duration_ms":100,"bytes_in":240,"bytes_out":75},{"timestamp":"2026-09-21T20:31:44","port":1022,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1022\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313032320d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"8732da86-7a22-43a4-9a71-c1cbcbe718e9","seq":1,"duration_ms":100,"bytes_in":234,"bytes_out":75},{"timestamp":"2026-09-21T20:31:44","port":1022,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1022\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3059.97 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313032320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35362e302e333035392e3937205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3059.97 Safari/537.32","ja3":"","session":"bd42e823-d5f0-4b67-9e6b-9aa5bb22ef5d","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":75},{"timestamp":"2026-09-21T20:31:39","port":1022,"proto":"tcp","app_proto":"","app_protocol":"ssh","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"SSH-2.0-paramiko_2.9.2\r\n\u0000\u0000\u0003�\u0005\u0014\u001e�\u0003�xOJ��q�\u0014��\u001a�\u0000\u0000\u0001\u001bcurve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group16-sha512,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1,ext-info-c\u0000\u0000\u0000qssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha2-512,rsa-sha2-256,ssh-rsa,ssh-dss\u0000\u0000\u0000Waes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc\u0000\u0000\u0000Waes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,3des-cbc\u0000\u0000\u0000�hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000�hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha1,hmac-md5,hmac-sha1-96,hmac-md5-96\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0004none\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"0d14280f-f2a9-4e64-9a6f-26589338ddac","seq":1,"duration_ms":122,"bytes_in":936,"bytes_out":10,"enriched":{"digest":"26a9f71a1accf0be","label":"SSH","strings":["SSH-2.0-paramiko_2.9.2","curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nis…","qssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,rsa-sha…","Waes128-ctr,aes192-ctr,aes256-ctr,aes128-cbc,aes192-cbc,aes256-cbc,blowfish-cbc,…","hmac-sha2-256,hmac-sha2-512,hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@open…","none"],"iocs":{"domains":["libssh.org","openssh.com"]}}},{"timestamp":"2026-09-19T16:56:45","port":11211,"proto":"tcp","app_proto":"","app_protocol":"memcached","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"stats\r\n","payload_hex":"73746174730d0a","method":"","user_agent":"","ja3":"","session":"93a7e472-e0f9-4f27-8b0a-e5d26539f714","seq":1,"duration_ms":101,"bytes_in":7,"bytes_out":10,"enriched":{"digest":"8ba3dc4bf81a4992","label":"Memcached","strings":["stats"]}},{"timestamp":"2026-08-18T22:22:45","port":5005,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:5005\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3039.81 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a353030350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35332e302e333033392e3831205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3039.81 Safari/537.32","ja3":"","session":"bf7e819b-0090-4279-b012-8a6d5e38b410","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":75},{"timestamp":"2026-08-12T23:33:59","port":40000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:40000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3059.92 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34303030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f36302e302e333035392e3932205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3059.92 Safari/537.32","ja3":"","session":"1acc4b2d-b7b5-49fe-a1da-b0f64658fcaa","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":75},{"timestamp":"2026-08-11T05:55:35","port":1900,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1900\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3099.62 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313930300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35312e302e333039392e3632205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3099.62 Safari/537.32","ja3":"","session":"770feafc-5907-4a9b-9b2e-b56b4c40938a","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":75},{"timestamp":"2026-06-26T14:27:03","port":8012,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8012\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3043.54 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383031320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35352e302e333034332e3534205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3043.54 Safari/537.32","ja3":"","session":"2e4039cf-9673-46e6-9d9e-b38394a93f04","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":75}],"http_methods":[{"method":"GET","count":19}],"distinct_ports_total":17,"top_paths":[{"path":"/","count":19,"ports":14}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"localhost","count":3},{"value":"185.228.81.201","count":1}],"top_alpns":[{"value":"http/1.1","count":6}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":2}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Dnt","Host","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*; q=0.01","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"localhost","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3076.89 Safari/537.32","notable":false}],"distinct_sets":2,"events_with_headers":8},"tags":[],"data_as_of":"2026-09-24T14:46:45.870679+00:00"}