{"ip":"44.220.188.103","total_events":83,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"request","label":"Request traffic","detail":"3,588 bytes sent","bytes_sent":3588,"session_seconds":10,"persistent":false}},"first_seen":"2026-02-17T13:10:26","last_seen":"2026-09-27T08:04:31","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-44-220-188-103.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":6697,"proto":"tcp","label":"","count":21},{"port":50090,"proto":"tcp","label":"","count":12},{"port":3306,"proto":"tcp","label":"MySQL","count":12},{"port":82,"proto":"tcp","label":"","count":11},{"port":5901,"proto":"tcp","label":"","count":11},{"port":1801,"proto":"tcp","label":"","count":3},{"port":24442,"proto":"tcp","label":"","count":3},{"port":322,"proto":"tcp","label":"","count":3},{"port":6000,"proto":"tcp","label":"X11","count":3},{"port":9865,"proto":"tcp","label":"","count":2},{"port":2053,"proto":"tcp","label":"","count":1},{"port":8099,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6","t13i3612h1_bcee18a5b459_8537cf56674e","t13i181000_85036bcba153_d41ae481755e","t13i171100_ab0a1bf427ad_ecd0401ec68b"],"tls_client_hello":"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","tls_ja3":["d18b223ce817c861b7829130500395c2","1987606153939a4c0ccc1465ecf8e431"],"http_akin":["b11cun050_00040017_345c845b","b11cun120_011403df_782553ac","b11cun050_00040017_976354f0"]},"fingerprint_peers":{"t13i4311h1_c7886603b240_b26ce05bbdd6":14,"t13i3612h1_bcee18a5b459_8537cf56674e":299,"b11cun050_00040017_345c845b":462,"b11cun120_011403df_782553ac":217,"b11cun050_00040017_976354f0":1275,"t13i181000_85036bcba153_d41ae481755e":63,"t13i171100_ab0a1bf427ad_ecd0401ec68b":64},"akin_families":{"b11cun050_00040017_345c845b":{"head":"b11cun050_00040017_345c845b","shapes":2,"ips":463},"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1275}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3035.56 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3044.52 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3017.99 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3079.111 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3023.104 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3086.58 Safari/537.32"],"timeline":[{"date":"2026-07-07","count":1},{"date":"2026-07-20","count":3},{"date":"2026-08-17","count":1},{"date":"2026-09-05","count":5},{"date":"2026-09-09","count":3},{"date":"2026-09-15","count":3},{"date":"2026-09-27","count":2}],"recent_events":[{"timestamp":"2026-09-27T08:04:31","port":9865,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:9865\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3017.99 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a393836350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35312e302e333031372e3939205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/51.0.3017.99 Safari/537.32","ja3":"","session":"cf81f6a8-0f82-468e-87c5-ef1536ed8ddc","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79},{"timestamp":"2026-09-27T08:04:30","port":9865,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3044.52 Safari/537.32\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3044.52 Safari/537.32","ja3":"d18b223ce817c861b7829130500395c2","session":"6baef4ad-66b0-4570-92aa-eb21f50a7b9d","seq":1,"duration_ms":101,"bytes_in":430,"bytes_out":79},{"timestamp":"2026-09-15T23:03:38","port":1801,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1801\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313830310d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"655888e2-095b-4248-9327-3cb59761d3ae","seq":1,"duration_ms":100,"bytes_in":234,"bytes_out":79},{"timestamp":"2026-09-15T23:03:38","port":1801,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:1801\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3035.56 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a313830310d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35382e302e333033352e3536205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3035.56 Safari/537.32","ja3":"","session":"61610f44-b919-48e6-823c-bf99a5e46f2b","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":79},{"timestamp":"2026-09-15T23:03:33","port":1801,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0010\u0000\u0000\u0000LIOR\u0012\u0001\u0000\u0000�����~�{s�M<�\u001a\u0011\u0007\u001c_�Q\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000�����Ωj\u0001\u0000\u0000\u0000\u0000\u001c \u0000>\u0000O\u0000S\u0000:\u00002\u00003\u0000.\u00009\u00004\u0000.\u00003\u00006\u0000.\u00001\u00004\u00001\u0000\\\u0000p\u0000r\u0000i\u0000v\u0000a\u0000t\u0000e\u0000$\u0000\\\u0000q\u0000u\u0000e\u0000u\u0000e\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000X\u0000\u0000\u0000X\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u000e�\u0000\u0000\u0001h\u0000\u0000\u0000\u0000\u0000\u0000<\u0000?\u0000x\u0000m\u0000l\u0000 \u0000v\u0000e\u0000r\u0000s\u0000i\u0000o\u0000n\u0000=\u0000\"\u00001\u0000.\u00000\u0000\"\u0000?\u0000>\u0000\r\u0000\n\u0000<\u0000s\u0000t\u0000r\u0000i\u0000n\u0000g\u0000>\u0000M\u0000S\u0000M\u0000Q\u0000<\u0000/\u0000s\u0000t\u0000r\u0000i\u0000n\u0000g\u0000>\u0000\u0000\u0000","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"7c8bd5ff-f107-4807-9495-d6dabae6d6c7","seq":1,"duration_ms":100,"bytes_in":274,"bytes_out":14,"enriched":{"digest":"ae517ce22b414c73","strings":["LIOR",">OS:23.94.36.141\\private$\\queueXX","h<?xml version=\"1.0\"?>","<string>MSMQ</string>"],"iocs":{"ips":["23.94.36.141"]}}},{"timestamp":"2026-09-09T07:54:35","port":6000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:6000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3086.58 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35302e302e333038362e3538205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3086.58 Safari/537.32","ja3":"","session":"835a00fb-0473-4819-a75a-0c60fcbbeeac","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79},{"timestamp":"2026-09-09T07:54:34","port":6000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:6000\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363030300d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"36d727d5-4105-4d2a-a10d-09d6e304335b","seq":1,"duration_ms":100,"bytes_in":235,"bytes_out":79},{"timestamp":"2026-09-09T07:54:29","port":6000,"proto":"tcp","app_proto":"","app_protocol":"mongodb","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":";\u0000\u0000\u0000U\u0012��\u0000\u0000\u0000\u0000�\u0007\u0000\u0000\u0004\u0000\u0000\u0000admin.$cmd\u0000\u0000\u0000\u0000\u0000����\u0014\u0000\u0000\u0000\u0010buildinfo\u0000\u0001\u0000\u0000\u0000\u0000","payload_hex":"3b00000055129cdb00000000d40700000400000061646d696e2e24636d640000000000ffffffff14000000106275696c64696e666f000100000000","method":"","user_agent":"","ja3":"","session":"1e5f0ce7-fb08-4112-8af0-68ff6526d8f0","seq":1,"duration_ms":100,"bytes_in":59,"bytes_out":14,"enriched":{"digest":"2d84b6f09754d401","strings":["admin.$cmd","buildinfo"]}},{"timestamp":"2026-09-05T22:21:44","port":6697,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:6697\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363639370d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"f704aff9-2281-4fe9-a1f0-95e53d357869","seq":1,"duration_ms":100,"bytes_in":234,"bytes_out":79},{"timestamp":"2026-09-05T22:21:44","port":6697,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:6697\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3023.104 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a363639370d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35392e302e333032332e313034205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3023.104 Safari/537.32","ja3":"","session":"ae0554d6-9410-4b39-9cbd-45e14d5fc5a7","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79}],"http_methods":[{"method":"GET","count":22}],"distinct_ports_total":12,"top_paths":[{"path":"/","count":22,"ports":12}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"localhost","count":1}],"top_alpns":[{"value":"http/1.1","count":9}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Dnt","Host","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*; q=0.01","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"localhost","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/57.0.3044.52 Safari/537.32","notable":false}],"distinct_sets":2,"events_with_headers":8},"tags":[],"data_as_of":"2026-10-01T21:36:01.283511+00:00"}