{"ip":"44.220.185.110","total_events":105,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"10,285 bytes sent","bytes_sent":10285,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-28T19:05:35","last_seen":"2026-09-22T20:02:50","events_24h":2,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-44-220-185-110.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":1801,"proto":"tcp","label":"","count":16},{"port":50090,"proto":"tcp","label":"","count":12},{"port":4444,"proto":"tcp","label":"","count":12},{"port":5900,"proto":"tcp","label":"VNC","count":12},{"port":60000,"proto":"tcp","label":"","count":11},{"port":443,"proto":"tcp","label":"HTTPS","count":10},{"port":9201,"proto":"tcp","label":"","count":3},{"port":222,"proto":"tcp","label":"","count":3},{"port":5432,"proto":"tcp","label":"Postgres","count":3},{"port":50060,"proto":"tcp","label":"","count":2},{"port":50030,"proto":"tcp","label":"","count":2},{"port":8088,"proto":"tcp","label":"Hadoop","count":2},{"port":8044,"proto":"tcp","label":"","count":2},{"port":50470,"proto":"tcp","label":"","count":2},{"port":2079,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":["d6729b7f24428169e981ad4840063ca5"],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6","t13d041000_16476d049b0b_78f1d400d464","t13i3612h1_bcee18a5b459_8537cf56674e"],"tls_client_hello":"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","tls_ja3":["d18b223ce817c861b7829130500395c2","f80d3d09f61892c5846c854dd84ac403","a66e498c488aa0523759691248cdfb01"],"http_akin":["a11cun121_0000e95f_b585e99d","a11cun050_0000004f_0d8a8ff5"]},"fingerprint_peers":{"t13i4311h1_c7886603b240_b26ce05bbdd6":20,"t13d041000_16476d049b0b_78f1d400d464":124,"t13i3612h1_bcee18a5b459_8537cf56674e":297,"d6729b7f24428169e981ad4840063ca5":143,"a11cun121_0000e95f_b585e99d":4,"a11cun050_0000004f_0d8a8ff5":97},"akin_families":{"a11cun050_0000004f_0d8a8ff5":{"head":"a11cun050_0000004f_0d8a8ff5","shapes":2,"ips":97}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3001.101 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3035.50 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3079.56 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3087.68 Safari/537.32","elasticsearch-py/7.13.4 (Python 3.10.21)","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3040.76 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3041.106 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3103.82 Safari/537.32"],"timeline":[{"date":"2026-06-29","count":2},{"date":"2026-07-04","count":3},{"date":"2026-07-12","count":3},{"date":"2026-08-02","count":1},{"date":"2026-08-12","count":2},{"date":"2026-08-18","count":2},{"date":"2026-08-23","count":2},{"date":"2026-08-25","count":1},{"date":"2026-08-29","count":1},{"date":"2026-08-31","count":3},{"date":"2026-09-08","count":1},{"date":"2026-09-10","count":2},{"date":"2026-09-12","count":3},{"date":"2026-09-20","count":2},{"date":"2026-09-22","count":2}],"recent_events":[{"timestamp":"2026-09-22T20:02:50","port":8044,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3001.101 Safari/537.32\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3001.101 Safari/537.32","ja3":"d18b223ce817c861b7829130500395c2","session":"4f266f99-8426-47f3-9a61-41479fe51a08","seq":1,"duration_ms":103,"bytes_in":431,"bytes_out":79},{"timestamp":"2026-09-22T20:02:50","port":8044,"proto":"tcp","app_proto":"","app_protocol":"http","host":"185.228.81.201","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"185.228.81.201:8044\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3035.50 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203138352e3232382e38312e3230313a383034340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35342e302e333033352e3530205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3035.50 Safari/537.32","ja3":"","session":"c0b4e18e-cd43-4108-8b65-aef7680585d1","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":79},{"timestamp":"2026-09-20T22:58:49","port":2052,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2052\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3103.82 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323035320d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35312e302e333130332e3832205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3103.82 Safari/537.32","ja3":"","session":"7f611d4b-c6b7-47a2-9c06-2c34a0a57a32","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79},{"timestamp":"2026-09-20T07:28:17","port":8020,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8020\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3041.106 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383032300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f36302e302e333034312e313036205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3041.106 Safari/537.32","ja3":"","session":"9f99b09a-6a26-4b40-b063-0b376aeb9d7b","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79},{"timestamp":"2026-09-12T21:35:10","port":9201,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:9201\",\"user-agent\":\"elasticsearch-py/7.13.4 (Python 3.10.21)\",\"x-elastic-client-meta\":\"es=7.13.4,py=3.10.21,t=7.13.4,ur=1.26.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393230310d0a4163636570742d456e636f64696e673a206964656e746974790d0a636f6e6e656374696f6e3a206b6565702d616c6976650d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a757365722d6167656e743a20656c61737469637365617263682d70792f372e31332e342028507974686f6e20332e31302e3231290d0a782d656c61737469632d636c69656e742d6d6574613a2065733d372e31332e342c70793d332e31302e32312c743d372e31332e342c75723d312e32362e31310d0a0d0a","method":"GET","user_agent":"elasticsearch-py/7.13.4 (Python 3.10.21)","ja3":"","session":"fc1e6457-0690-470d-add5-289b3da3024b","seq":1,"duration_ms":100,"bytes_in":245,"bytes_out":79},{"timestamp":"2026-09-12T21:35:10","port":9201,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:9201\",\"user-agent\":\"elasticsearch-py/7.13.4 (Python 3.10.21)\",\"x-elastic-client-meta\":\"es=7.13.4,py=3.10.21,t=7.13.4,ur=1.26.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/_alias","summary":"","payload_hex":"474554202f5f616c69617320485454502f312e310d0a486f73743a20<HONEYPOT>3a393230310d0a4163636570742d456e636f64696e673a206964656e746974790d0a636f6e6e656374696f6e3a206b6565702d616c6976650d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a757365722d6167656e743a20656c61737469637365617263682d70792f372e31332e342028507974686f6e20332e31302e3231290d0a782d656c61737469632d636c69656e742d6d6574613a2065733d372e31332e342c70793d332e31302e32312c743d372e31332e342c75723d312e32362e31310d0a0d0a","method":"GET","user_agent":"elasticsearch-py/7.13.4 (Python 3.10.21)","ja3":"","session":"fc1e6457-0690-470d-add5-289b3da3024b","seq":2,"duration_ms":225,"bytes_in":496,"bytes_out":158},{"timestamp":"2026-09-12T21:35:10","port":9201,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept-encoding\":\"identity\",\"connection\":\"keep-alive\",\"content-type\":\"application/json\",\"host\":\"<HONEYPOT>:9201\",\"user-agent\":\"elasticsearch-py/7.13.4 (Python 3.10.21)\",\"x-elastic-client-meta\":\"es=7.13.4,py=3.10.21,t=7.13.4,ur=1.26.11\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/*","summary":"","payload_hex":"474554202f2a20485454502f312e310d0a486f73743a20<HONEYPOT>3a393230310d0a4163636570742d456e636f64696e673a206964656e746974790d0a636f6e6e656374696f6e3a206b6565702d616c6976650d0a636f6e74656e742d747970653a206170706c69636174696f6e2f6a736f6e0d0a757365722d6167656e743a20656c61737469637365617263682d70792f372e31332e342028507974686f6e20332e31302e3231290d0a782d656c61737469632d636c69656e742d6d6574613a2065733d372e31332e342c70793d332e31302e32312c743d372e31332e342c75723d312e32362e31310d0a0d0a","method":"GET","user_agent":"elasticsearch-py/7.13.4 (Python 3.10.21)","ja3":"","session":"fc1e6457-0690-470d-add5-289b3da3024b","seq":3,"duration_ms":357,"bytes_in":742,"bytes_out":237},{"timestamp":"2026-09-10T01:46:18","port":50030,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3079.56 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3079.56 Safari/537.32","ja3":"","session":"f6061f33-fc3d-445a-8a50-39f7a20ce85a","seq":1,"duration_ms":100,"bytes_in":430,"bytes_out":79},{"timestamp":"2026-09-10T01:46:18","port":50030,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:50030\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3087.68 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303033300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35382e302e333038372e3638205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3087.68 Safari/537.32","ja3":"","session":"0985a93c-c9f9-4e82-8021-49fa586bcca7","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":79},{"timestamp":"2026-09-08T17:18:36","port":47001,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:47001\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3040.76 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a34373030310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35322e302e333034302e3736205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3040.76 Safari/537.32","ja3":"","session":"e62491ef-b0eb-4a2c-a654-b316852782db","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":79}],"http_methods":[{"method":"GET","count":38}],"distinct_ports_total":24,"top_paths":[{"path":"/","count":36,"ports":23},{"path":"/_alias","count":1,"ports":1},{"path":"/*","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[{"value":"localhost","count":5},{"value":"185.228.81.201","count":1}],"top_alpns":[{"value":"http/1.1","count":11}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Dnt","Host","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*; q=0.01","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"localhost","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3001.101 Safari/537.32","notable":false}],"distinct_sets":3,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-23T16:10:57.799763+00:00"}