{"ip":"192.197.201.114","total_events":23,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"18+ ports swept","confidence":"medium","network_type":"network services","why":["No exploit payloads observed.","Swept 18 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"13,249 bytes sent","bytes_sent":13249,"session_seconds":0,"persistent":false}},"first_seen":"2026-09-23T10:17:40","last_seen":"2026-09-24T13:35:10","events_24h":21,"events_7d":23,"geo":{"country_code":"US","country_name":"United States","region":"California","city":"San Francisco","lat":37.7794,"lon":-122.4176,"asn":400587,"org":"Ryamer, LLC"},"source_domain":"192.197.201.114.static.ryamer.net","known_scanners":[],"scanner_tag":null,"cve_matches":[],"malware":[],"top_ports":[{"port":6060,"proto":"tcp","label":"","count":2},{"port":5050,"proto":"tcp","label":"","count":2},{"port":9505,"proto":"tcp","label":"","count":2},{"port":9309,"proto":"tcp","label":"","count":2},{"port":2052,"proto":"tcp","label":"","count":2},{"port":4567,"proto":"tcp","label":"","count":1},{"port":48018,"proto":"tcp","label":"","count":1},{"port":12559,"proto":"tcp","label":"","count":1},{"port":8817,"proto":"tcp","label":"","count":1},{"port":12119,"proto":"tcp","label":"","count":1},{"port":61234,"proto":"tcp","label":"","count":1},{"port":8462,"proto":"tcp","label":"","count":1},{"port":8408,"proto":"tcp","label":"","count":1},{"port":9209,"proto":"tcp","label":"","count":1},{"port":9019,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9","t13i1515h2_8daaf6152771_02713d6af862"],"tls_client_hello":"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","tls_ja3":["e974ce56d3da0ca8cf2f98c06acba6a3","00cb962d2c86361c8dd24d4e7046972a","ce220a08e6ba14ac1f99779d1b4c3209","19e29534fd49dd27d09234e639c4057e","33c2ccf9f902a32efddc30f4dbcef0c1"],"http_akin":["a11cun150_001cf97d_49a62551","a11cun091_1000017d_7a29e38e"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":3002,"t13i1515h2_8daaf6152771_02713d6af862":58,"a11cun150_001cf97d_49a62551":45,"a11cun091_1000017d_7a29e38e":4},"akin_families":{},"user_agents":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36"],"timeline":[{"date":"2026-09-23","count":12},{"date":"2026-09-24","count":11}],"recent_events":[{"timestamp":"2026-09-24T13:35:10","port":8408,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"192.3.118.146:8408\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203139322e332e3131382e3134363a383430380d0a507261676d613a206e6f2d63616368650d0a43616368652d436f6e74726f6c3a206e6f2d63616368650d0a5365632d43682d55613a20224e6f745f41204272616e64223b763d2238222c20224368726f6d69756d223b763d22313230222c2022476f6f676c65204368726f6d65223b763d22313230220d0a5365632d43682d55612d4d6f62696c653a203f300d0a5365632d43682d55612d506c6174666f726d3a20226d61634f53220d0a557067726164652d496e7365637572652d52657175657374733a20310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132302e302e302e30205361666172692f3533372e33360d0a4163636570743a20746578742f68746d6c2c6170706c69636174696f6e2f7868746d6c2b786d6c2c6170706c69636174696f6e2f786d6c3b713d302e392c696d6167652f617669662c696d6167652f776562702c696d6167652f61706e672c2a2f2a3b713d302e382c6170706c69636174696f6e2f7369676e65642d65786368616e67653b763d62333b713d302e370d0a5365632d46657463682d536974653a206e6f6e650d0a5365632d46657463682d4d6f64653a206e617669676174650d0a5365632d46657463682d557365723a203f310d0a5365632d46657463682d446573743a20646f63756d656e740d0a4163636570742d456e636f64696e673a20677a69700d0a4163636570742d4c616e67756167653a20656e3b713d302e390d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","ja3":"bb4dee17c39af96707332258793d5d08","session":"76087e97-7260-4eec-945f-0d896b27592b","seq":1,"duration_ms":100,"bytes_in":665,"bytes_out":80},{"timestamp":"2026-09-24T10:54:41","port":12119,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"192.3.118.146:12119\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","ja3":"0ac8b480ea76e6d4d7ba589d5db6cb3b","session":"82de1b78-fc37-4f60-8824-c6a41828f4ae","seq":1,"duration_ms":100,"bytes_in":666,"bytes_out":80},{"timestamp":"2026-09-24T10:03:11","port":9209,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"192.3.118.146:9209\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","ja3":"37f2b5a79cf758e3263d819bac64422c","session":"4d4c291d-d19c-4282-8df5-414db9dcfe9e","seq":1,"duration_ms":100,"bytes_in":665,"bytes_out":80},{"timestamp":"2026-09-24T08:30:44","port":5050,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"192.3.118.146:5050\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","ja3":"19e29534fd49dd27d09234e639c4057e","session":"18ede8cc-fc1e-4053-a69c-8d6d6b664e7c","seq":1,"duration_ms":100,"bytes_in":461,"bytes_out":80},{"timestamp":"2026-09-24T08:30:40","port":5050,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"192.3.118.146:5050\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","ja3":"19e29534fd49dd27d09234e639c4057e","session":"4b11721d-2138-4dfb-aa5d-721c6a21fd02","seq":1,"duration_ms":100,"bytes_in":450,"bytes_out":80},{"timestamp":"2026-09-24T06:51:08","port":9309,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"192.3.118.146:9309\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","ja3":"19e29534fd49dd27d09234e639c4057e","session":"fcdca607-bb5b-4e8e-a30b-9f142e8ed16f","seq":1,"duration_ms":100,"bytes_in":461,"bytes_out":80},{"timestamp":"2026-09-24T06:51:03","port":9309,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"max-age=0\",\"dnt\":\"1\",\"host\":\"192.3.118.146:9309\",\"sec-gpc\":\"1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36","ja3":"19e29534fd49dd27d09234e639c4057e","session":"d06f9c39-ade0-4f34-b74d-2f48f1356791","seq":1,"duration_ms":100,"bytes_in":450,"bytes_out":80},{"timestamp":"2026-09-24T05:44:12","port":7927,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"192.3.118.146:7927\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","ja3":"e9e5b0513b870f743d3a13d3891ae7c7","session":"e67800ce-bde4-4212-96e3-5e4c8cc60ddf","seq":1,"duration_ms":100,"bytes_in":665,"bytes_out":80},{"timestamp":"2026-09-24T04:44:29","port":8817,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"192.3.118.146:8817\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","ja3":"f93e891c896a8c605b13989a9ba80b2f","session":"debb8b3f-30b3-4996-ac26-7ca0106fcf03","seq":1,"duration_ms":100,"bytes_in":676,"bytes_out":80},{"timestamp":"2026-09-24T04:13:04","port":4567,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\",\"accept-encoding\":\"gzip\",\"accept-language\":\"en;q=0.9\",\"cache-control\":\"no-cache\",\"host\":\"192.3.118.146:4567\",\"pragma\":\"no-cache\",\"sec-ch-ua\":\"\\\"Not_A Brand\\\";v=\\\"8\\\", \\\"Chromium\\\";v=\\\"120\\\", \\\"Google Chrome\\\";v=\\\"120\\\"\",\"sec-ch-ua-mobile\":\"?0\",\"sec-ch-ua-platform\":\"\\\"macOS\\\"\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"upgrade-insecure-requests\":\"1\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["h2","http/1.1"],"url_path":"/favicon.ico","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","ja3":"ae5163ad1e15ff19197be9092d93089e","session":"f5ed936d-0637-4139-910d-d6f30368cfaf","seq":1,"duration_ms":100,"bytes_in":676,"bytes_out":80}],"http_methods":[{"method":"GET","count":23}],"distinct_ports_total":18,"top_paths":[{"path":"/","count":14,"ports":14},{"path":"/favicon.ico","count":9,"ports":9}],"distinct_paths_total":2,"top_snis":[],"top_hosts":[{"value":"192.3.118.146","count":23}],"top_alpns":[{"value":"h2, http/1.1","count":12}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Host","Pragma","Sec-Ch-Ua","Sec-Ch-Ua-Mobile","Sec-Ch-Ua-Platform","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","Upgrade-Insecure-Requests","User-Agent"],"representative":[{"name":"Accept","value":"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7","notable":false},{"name":"Accept-Encoding","value":"gzip","notable":false},{"name":"Accept-Language","value":"en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Host","value":"192.3.118.146:8408","notable":false},{"name":"Pragma","value":"no-cache","notable":false},{"name":"Sec-Ch-Ua","value":"\"Not_A Brand\";v=\"8\", \"Chromium\";v=\"120\", \"Google Chrome\";v=\"120\"","notable":false},{"name":"Sec-Ch-Ua-Mobile","value":"?0","notable":false},{"name":"Sec-Ch-Ua-Platform","value":"\"macOS\"","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"Upgrade-Insecure-Requests","value":"1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36","notable":false}],"distinct_sets":2,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-24T14:02:08.764525+00:00"}