{"ip":"44.220.188.178","total_events":82,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"payload","label":"Sustained payload","detail":"8,023 bytes sent","bytes_sent":8023,"session_seconds":0,"persistent":false}},"first_seen":"2026-04-24T03:58:37","last_seen":"2026-09-27T12:08:13","events_24h":0,"events_7d":2,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-44-220-188-178.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":12},{"port":10443,"proto":"tcp","label":"","count":12},{"port":5005,"proto":"tcp","label":"","count":12},{"port":50997,"proto":"tcp","label":"","count":11},{"port":9443,"proto":"tcp","label":"","count":11},{"port":3389,"proto":"tcp","label":"RDP","count":4},{"port":10554,"proto":"tcp","label":"","count":3},{"port":2002,"proto":"tcp","label":"","count":3},{"port":30002,"proto":"tcp","label":"","count":3},{"port":8044,"proto":"tcp","label":"","count":2},{"port":2083,"proto":"tcp","label":"","count":2},{"port":19888,"proto":"tcp","label":"","count":2},{"port":2087,"proto":"tcp","label":"","count":1},{"port":8008,"proto":"tcp","label":"HTTP-alt","count":1},{"port":12345,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":["d6729b7f24428169e981ad4840063ca5"],"tls_ja4":["t13i4311h1_c7886603b240_b26ce05bbdd6","t13d041000_16476d049b0b_78f1d400d464","t13i3612h1_bcee18a5b459_8537cf56674e"],"tls_client_hello":"16030106130100060f030300808181dc6ed91dfbe64e5d762f8c7d716178fcf549036ed22fe2a7cef57b68205a6af5a28c1862309f1eb41f962a5707487e04fd25275a5668d36fc21279d98d0048130213031301c02cc030c02bc02fcca9cca8009f009eccaac0adc0acc024c028c023c027c00ac014c009c013c09fc09e006b006700390033009d009cc09dc09c003d003c0035002f0100057eff01000100000b000403000102000a0012001011ec001d0017001e00180019010001010010000b000908687474702f312e31001600000017000000310000000d0036003409050906090404030503060308070808081a081b081c0809080a080b080408050806040105010601030303010302040205020602002b00050403040303002d00020101003304ea04e811ec04c05ab1a631c14f2491add12a0e11d47d426aa82b088185d4785cd604d0f6287b44b7a9b0690c215505a487c608b652090e90bb74fe983cb1d353c6014201c559c4eaaa1c2b3651b53e8fe28af4fc03fc0a7ea3fc916ec9aafd07a0d382725e87c48f95924dc856c1843187d4ba0936bbb3937bcd7000b42062887acca7c056a8f44ddab205c751ccaf59040ea8a8574473fa676bb23c1c9c117f31a20393925601450e7da79c3315337319036f2624f3380211d7953bc0b19f81988bb1b7c954c751b39da7670435f6673632b130a16d91d7281bd4a66ed26f06754227c53213455c21684d8dc0c41030ca258ab15e97bd5f4766ca726f9f6901eaa31d26444dff4c405cbb6ab395a579244087c73a3c78467ca46d3eca09940193ff91b9125007c20b34b891688a85041d541c4588555d579d1266356d3934ee6a9d8909b7fb13a2ba8a43fd339f86113ba67caf15f08141f67c3b35a91f06cccf14652188932bd30e9d030d88b0aa0ae29bbc23317c824cb3db058bc4765aa3bbe131b34df60be67b1042cbb90fc43d71399e408a598a999ce5d41bfd97bfb013adc576c5c0b29d4fe52fd8f6ca3fb3734ec37fb6d89fcabc3ce0a6baf344bfe80cb108e5bb2c144b316ccd6dc33cdcf76a0f41086a5b1c2732a6f9b6016ce61e5d994b48cb341f89738d055d1fa5687c95a093911440e5ade031be477c2c7c412072d377d7e4a5dbf705f81524fcd76b1688335c7368da7c62b9c79de055cb8767a1a705757e51c7dcba66f339c5c0b806c8d2965ac4ac9b9c5fdb395cbfab4419e1af9b107ee2f78258aa0bb383a2c9289536272fdefcb2e0c7a86cc743c4814bc9684b4cc379d2986fc19c677c2068925966ac41b157f26133ba8cbe091281b297dcb091f694c8207c2a356b21c9e037d48c015330653904a3984738084b6c907c90e5f3bbd84241eaa4b11d620bb98a6b1c83249955226d449bde5b3938e9741f79449d919f6b6450f713659386961eb601f611a1b3432966d14475b7aae1782fbe0b1e3fa5756d3a0fcbe165f5647ec48766fb1bb696048256bc6cb9d4342ce9279994be1002c3b68b9839d70bcaf63844ea490f1cacdcf28f6d16776d179058f43c2a8c44434a420425c760527252eb65752019654722000b658010ae043430a431103abb42b3a7228a984be6401000ac71a07169a4f445f7b8860529239ca092737a18ee226649da1b69471dc6770252cc231d837ec29867d8969b4cb02d126b2c7b8a9ff95a0f7c38a2ec6049d2fc4acbecca226727e33ca15185bf3fe6523b797ac33176bbac87125672ff01c2c32a374a6698864b7a0c285d8f71b14ae917864bc45786bbbff61c87a0067d80ac12b2ceb9065233a2c84a21a9d2fb5ee8c3b41bb50c00b5a1714cbe5c461d646b82b6acc5c5353cc4283bf1d26bddcb0c4cb02da81704fa758e9a3c29e4a7a050f9a5b5425bb9eb1a13122438e1592dc722a805500e450356a01f70935c4369651a274206d2a77b07a2bf5b891452a4f9c0b26c6b4e635643d9725eda077b45574d163977aca33cf2d5a3347821469c7fe9a984b69a2b6d5084fb62a992f2b3763b22b782661ec1020004611c590b4da7a02b6902d7d2db72500a3194814c63dfbc02f0496c595a2c60fa06bb0fabe16f9b8179128286de0bc1fef943e231bbc41f3e584e1da0b5ab42a9e29cb826921c4061291c001d002049d789bfab6d8dbb8f1c0ce743afe512274cbad2db32bfa9e3085ed562aa3207001b000504000100","tls_ja3":["d18b223ce817c861b7829130500395c2","f80d3d09f61892c5846c854dd84ac403","a66e498c488aa0523759691248cdfb01"],"http_akin":["b11cun050_00040017_345c845b","b11cun120_011403df_782553ac","b11cun050_00040017_976354f0"]},"fingerprint_peers":{"t13i4311h1_c7886603b240_b26ce05bbdd6":14,"t13i3612h1_bcee18a5b459_8537cf56674e":300,"d6729b7f24428169e981ad4840063ca5":131,"b11cun050_00040017_345c845b":461,"b11cun120_011403df_782553ac":220,"b11cun050_00040017_976354f0":1279,"t13d041000_16476d049b0b_78f1d400d464":134},"akin_families":{"b11cun050_00040017_345c845b":{"head":"b11cun050_00040017_345c845b","shapes":3,"ips":461},"b11cun050_00040017_976354f0":{"head":"b11cun050_00040017_976354f0","shapes":2,"ips":1278}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3036.70 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3027.112 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3004.86 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3005.52 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/58.0.3035.89 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3051.111 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"],"timeline":[{"date":"2026-08-02","count":3},{"date":"2026-08-09","count":12},{"date":"2026-08-17","count":1},{"date":"2026-08-18","count":1},{"date":"2026-08-21","count":1},{"date":"2026-08-29","count":4},{"date":"2026-08-31","count":1},{"date":"2026-09-01","count":2},{"date":"2026-09-16","count":1},{"date":"2026-09-27","count":2}],"recent_events":[{"timestamp":"2026-09-27T12:08:13","port":8044,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:8044\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3090.101 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a383034340d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35302e302e333039302e313031205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/50.0.3090.101 Safari/537.32","ja3":"","session":"17351455-a90f-46da-98fe-4f74b043c7c5","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":79},{"timestamp":"2026-09-27T12:08:12","port":8044,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3044.64 Safari/537.32\"}","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":["http/1.1"],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3044.64 Safari/537.32","ja3":"d18b223ce817c861b7829130500395c2","session":"95349f95-91c1-4639-bbe0-22ffd82c9b3a","seq":1,"duration_ms":101,"bytes_in":430,"bytes_out":79},{"timestamp":"2026-09-16T11:54:58","port":2083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2083\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3005.52 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35342e302e333030352e3532205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3005.52 Safari/537.32","ja3":"","session":"d443e153-ad7f-4048-8591-f8b5ce2919fa","seq":1,"duration_ms":100,"bytes_in":236,"bytes_out":79},{"timestamp":"2026-09-01T14:24:56","port":19888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"localhost","headers":"{\"accept\":\"application/json, text/plain, */*; q=0.01\",\"accept-encoding\":\"gzip, deflate, br\",\"accept-language\":\"en-US,en;q=0.9\",\"cache-control\":\"no-cache\",\"connection\":\"keep-alive\",\"dnt\":\"1\",\"host\":\"localhost\",\"sec-fetch-dest\":\"document\",\"sec-fetch-mode\":\"navigate\",\"sec-fetch-site\":\"none\",\"sec-fetch-user\":\"?1\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3004.86 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"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","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3004.86 Safari/537.32","ja3":"","session":"3b2dec4a-e61b-4b08-8da7-e56523bd877e","seq":1,"duration_ms":100,"bytes_in":430,"bytes_out":79},{"timestamp":"2026-09-01T14:24:56","port":19888,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:19888\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3036.70 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a31393838380d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35332e302e333033362e3730205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/53.0.3036.70 Safari/537.32","ja3":"","session":"f5f6f86d-99b3-4e61-8bf3-539ab2b1d554","seq":1,"duration_ms":100,"bytes_in":239,"bytes_out":79},{"timestamp":"2026-08-31T03:56:30","port":2083,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:2083\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3050.53 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a323038330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35352e302e333035302e3533205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/55.0.3050.53 Safari/537.32","ja3":"","session":"8cb194a3-76ed-469a-b86f-f96e9eb8a94e","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79},{"timestamp":"2026-08-29T23:26:57","port":3389,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3389\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3023.84 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333338390d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35362e302e333032332e3834205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3023.84 Safari/537.32","ja3":"","session":"26ef1aa1-cdfb-4247-89f0-3ad6ae5605cf","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":79},{"timestamp":"2026-08-29T23:26:56","port":3389,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:3389\",\"user-agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a333338390d0a557365722d4167656e743a204d6f7a696c6c612f352e3020284d6163696e746f73683b20496e74656c204d6163204f5320582031305f31355f3729204170706c655765624b69742f3533372e333620284b48544d4c2c206c696b65204765636b6f29204368726f6d652f3132342e302e302e30205361666172692f3533372e33360d0a4163636570742d656e636f64696e673a20677a69700d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","ja3":"","session":"6ce4521a-f523-458d-bc54-af35397e3204","seq":1,"duration_ms":100,"bytes_in":235,"bytes_out":79},{"timestamp":"2026-08-29T23:26:51","port":3389,"proto":"tcp","app_proto":"","app_protocol":"rdp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0000\u0000\u0000\u0000","payload_hex":"030000130ee000000000000100080000000000","method":"","user_agent":"","ja3":"","session":"f1a840fa-87d2-480e-a981-65ba229cbb16","seq":1,"duration_ms":100,"bytes_in":19,"bytes_out":14,"enriched":{"digest":"b481beafe15f409a","label":"RDP (X.224)"}},{"timestamp":"2026-08-29T23:26:51","port":3389,"proto":"tcp","app_proto":"","app_protocol":"tls","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\u0016\u0003\u0001\u0006n\u0001\u0000\u0006j\u0003\u0003\u0014�g%��\u0019\u000f���\r!�2Q`\"\t\u000b\\��\u0015\u001c!\r�z�b� �\u0003�h��+J�\n�>|A���)d6�\u0002�qM�7�\u0005�x4\u0000�\u0013\u0002\u0013\u0003\u0013\u0001�,�0\u0000�\u0000�̨̩̪�����]�a�W�S\u0000��+�/\u0000�\u0000������\\�`�V�R\u0000����������$�(\u0000k\u0000j�s�w\u0000�\u0000�\u0000m\u0000��#�'\u0000g\u0000@�r�v\u0000�\u0000�\u0000l\u0000��\n�\u0014\u00009\u00008\u0000�\u0000��\u0019\u0000:\u0000��\t�\u0013\u00003\u00002\u0000E\u0000D�\u0018\u00004\u0000F\u0000����Q\u0000����P����\u0000=\u0000�\u0000<\u0000�\u00005\u0000�\u0000/\u0000A\u0001\u0000\u0005u�\u0001\u0000\u0001\u0000\u0000\u000b\u0000\u0004\u0003\u0000\u0001\u0002\u0000\n\u0000\u0012\u0000\u0010\u0011�\u0000\u001d\u0000\u0017\u0000\u001e\u0000\u0018\u0000\u0019\u0001\u0000\u0001\u0001\u0000#\u0000\u0000\u0000\u0016\u0000\u0000\u0000\u0017\u0000\u0000\u0000\r\u0000<\u0000:\t\u0005\t\u0006\t\u0004\u0004\u0003\u0005\u0003\u0006\u0003\b\u0007\b\b\b\u001a\b\u001b\b\u001c\b\t\b\n\b\u000b\b\u0004\b\u0005\b\u0006\u0004\u0001\u0005\u0001\u0006\u0001\u0003\u0003\u0002\u0003\u0003\u0001\u0002\u0001\u0003\u0002\u0002\u0002\u0004\u0002\u0005\u0002\u0006\u0002\u0000+\u0000\u0005\u0004\u0003\u0004\u0003\u0003\u0000-\u0000\u0002\u0001\u0001\u00003\u0004�\u0004�\u0011�\u0004�}�0�5\u0007�2�����|V\\EQ\u0006���q�3+�����K�\nˈ�H!�r��t���\"3�K�\u000b���Ufi=\u000fT��\t�RR˓�\u001d�f”�����+zH�P������\u0018�\u0011\u001cxV��`�@e8\r��0(u�\u001bH\u0014�-e\u0013:V\\����\u001aեB�\u000f&똽��C\th�\u0005|\rp*\u001c� ]����\r1׻\u0001c\f\u0006�@a�>cp@C���x��pb|p\u001cj{�\u001aU����Eɦ\u0002���f�\u0016��a�\n%Tf�\u0003!��6^\u0019���5�@i��N |D�\u0003˄�\u0019^�K��S�ꮭI��\u001b��HJ�W\u0016����q�ř)� 4�)\rt�m7�+�'�Y\t��S��g~��hF\u0011�\u0017��F��\\��$\u0010���\u0019BҮ�\u0014�d�P-\u0000E�Q]�[Y\"T��\u001c\u0004�w7ݧZ7*:?�2\u0013@�,�,��\t��2.��M��ۘΑ\u0001y_W-L��x5h�\u0016�����Gr�ؾ]Y��qυVq�A\u0006�B��\\y��+\u0001(\u0017�2���\u0015���ı��SA$H��Ĕ֠\u001e�|��������\u0004�����\u001b3\u001bgo��?��\u00146�~#3\u0003�ط���D��\b���g\u000b��-\u0001�A��&-��[��;��T�e0*9=YT�\u0019 b\u0005�SE���\r��|��DM��&�o ���\u0007�+�\u0001\u0016E#~h6��!}�?FplC)�\\\u0005A�|���\u0011\u000e�6�\u0000*�\\��D���b�\t\\\u00181�^�|�:�\u0018\u0006\b������TWr���3�9���KtC�T8w�\u0000�\b�\u0014�W�,���0fPg&{\u0005f���J��f0�t��\u00150�\u0004>�%�dǙ\u0000кU�\u0002ë+<�\u0000\u001d\u0014�#��L<\u001e��\u0000�Puina�\u0004\b%nwr^™Ü0>WPj�b%�����\u000f\u000e\u001aI_��\n��1[)\u0004�m\u0012f[?�\b�$���E����XZ\fˊ�q;�(���\u001a\u0014�pI;�Z��[#�:t�\u001cW\u0018\u0014�[\u001a��\u001efD�+�h����\u001bQqj��K]ft�\n~�ӗM@�\u001f�?�W��X��2�-u�J\t��\\���(\u0003�cj\u0016�\u0018va\u0002*��U�4`\u0013�\u0011a\r�0�\u000b\u0012�u�V��C\u001cU\u0014��vyA�F8M\"�:�\b<���'���\n��~\u0019SC\u000b\f��\u000b���i@&\f�Z��̟/�AޑI`\u000b\u0005-����]��fX�G��c:W\u000e��y�;�JiAŌ�B�'Y(��|\u0018\u000b1��+����(9Z���-\u0013<�\"z57v6�]4{\u0007�\u0011�<�\b\u001b&A�5����Q�M@�U\u001a�^��̕81\u0003���Ʊ��\u001d�:S��Dի]�����\u000eiT�II���£�2o�:!�8�\u0014\r.KVq2\u001d�ڕ�A1a�x����A�\u001f�4�q�\u0005�M~w�\b\t\u0000��Xi����\u000f��q7du� �\f�kw�����\u001a\r\u001a�������k��\u00058���v��\u0014�ƨ\t\b��猷\u00067*\u001aC\u001c�#�K%��\u0005ĕTK��2�\u0016\t�e\u0000\u001d\u0000 O\u0016{\u000e�+*\u00016K�,���$.�u5jFSұ\u001b�.U�g%\u0000\u001b\u0000\u0005\u0004\u0000\u0001\u0000\u0003","payload_hex":"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","method":"","user_agent":"","ja3":"","session":"f1a840fa-87d2-480e-a981-65ba229cbb16","seq":2,"duration_ms":322,"bytes_in":1670,"bytes_out":28,"enriched":{"digest":"b36e3af766a13a17","label":"TLS/SSL","strings":["2Q`\"","|V\\EQ","Ufi=",">cp@C","pb|p","N |D","[Y\"T","Z7*:?","y_W-L","SA$H"]}}],"http_methods":[{"method":"GET","count":25}],"distinct_ports_total":17,"top_paths":[{"path":"/","count":25,"ports":17}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"localhost","count":2}],"top_alpns":[{"value":"http/1.1","count":6}],"banners":[{"value":"SSH-2.0-paramiko_2.9.2","count":1}],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Accept-Language","Cache-Control","Connection","Dnt","Host","Sec-Fetch-Dest","Sec-Fetch-Mode","Sec-Fetch-Site","Sec-Fetch-User","User-Agent"],"representative":[{"name":"Accept","value":"application/json, text/plain, */*; q=0.01","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate, br","notable":false},{"name":"Accept-Language","value":"en-US,en;q=0.9","notable":false},{"name":"Cache-Control","value":"no-cache","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Dnt","value":"1","notable":false},{"name":"Host","value":"localhost","notable":false},{"name":"Sec-Fetch-Dest","value":"document","notable":false},{"name":"Sec-Fetch-Mode","value":"navigate","notable":false},{"name":"Sec-Fetch-Site","value":"none","notable":false},{"name":"Sec-Fetch-User","value":"?1","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/59.0.3044.64 Safari/537.32","notable":false}],"distinct_sets":2,"events_with_headers":8},"tags":[],"data_as_of":"2026-10-01T17:16:56.098627+00:00"}