{"ip":"44.220.188.24","total_events":49,"verdict":{"verdict":"scanner","label":"Recognized scanner","detail":"crowdstrikefalconsurface","confidence":"high","network_type":null,"why":["Source IP is in a known scanner range (crowdstrikefalconsurface).","Known research and commercial scanners are labelled as such, not as threats."],"engagement":{"level":"request","label":"Request traffic","detail":"1,158 bytes sent","bytes_sent":1158,"session_seconds":0,"persistent":false}},"first_seen":"2026-03-14T12:21:16","last_seen":"2026-09-23T23:26:44","events_24h":4,"events_7d":4,"geo":{"country_code":"US","country_name":"United States","region":"Virginia","city":"Ashburn","lat":39.0469,"lon":-77.4903,"asn":14618,"org":"Amazon.com, Inc."},"source_domain":"scanner-44-220-188-24.reposify.net","known_scanners":["crowdstrikefalconsurface","Reposify (CrowdStrike)"],"scanner_tag":{"key":"reposify","label":"Reposify (CrowdStrike)","category":"commercial","url":"https://www.crowdstrike.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":5222,"proto":"tcp","label":"XMPP","count":13},{"port":666,"proto":"tcp","label":"","count":11},{"port":2087,"proto":"tcp","label":"","count":11},{"port":5432,"proto":"tcp","label":"Postgres","count":3},{"port":8883,"proto":"tcp","label":"","count":3},{"port":50995,"proto":"tcp","label":"","count":1},{"port":8880,"proto":"tcp","label":"","count":1},{"port":50996,"proto":"tcp","label":"","count":1},{"port":137,"proto":"tcp","label":"NetBIOS","count":1},{"port":179,"proto":"tcp","label":"BGP","count":1},{"port":61000,"proto":"tcp","label":"","count":1},{"port":23,"proto":"tcp","label":"Telnet","count":1},{"port":1443,"proto":"tcp","label":"","count":1}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i171100_ab0a1bf427ad_ecd0401ec68b","t13i4311h1_c7886603b240_b26ce05bbdd6"],"tls_client_hello":"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","tls_ja3":["1987606153939a4c0ccc1465ecf8e431"],"http_akin":["a11cun050_0000004f_0d8a8ff5"]},"fingerprint_peers":{"t13i4311h1_c7886603b240_b26ce05bbdd6":22,"a11cun050_0000004f_0d8a8ff5":179,"t13i171100_ab0a1bf427ad_ecd0401ec68b":69},"akin_families":{"a11cun050_0000004f_0d8a8ff5":{"head":"a11cun050_0000004f_0d8a8ff5","shapes":2,"ips":181}},"user_agents":["Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3080.70 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3015.100 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3016.85 Safari/537.32","Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3007.55 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3067.86 Safari/537.32","Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3081.93 Safari/537.32"],"timeline":[{"date":"2026-07-08","count":1},{"date":"2026-07-28","count":1},{"date":"2026-08-16","count":2},{"date":"2026-09-13","count":1},{"date":"2026-09-15","count":1},{"date":"2026-09-23","count":4}],"recent_events":[{"timestamp":"2026-09-23T23:26:44","port":1443,"proto":"tcp","app_proto":"","app_protocol":"http","host":"192.3.118.146","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"192.3.118.146:1443\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3016.85 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a203139322e332e3131382e3134363a313434330d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f36302e302e333031362e3835205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3016.85 Safari/537.32","ja3":"","session":"6f2d5b73-f7e5-4c0f-9fdb-c1ba85afaff7","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":78},{"timestamp":"2026-09-23T20:32:33","port":8883,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u00101\u0000\u0004MQTT\u0005\u0002\u0000<\u0000\u0000$f4a4685b-b053-45bd-9e4f-fb828fe3bde4","payload_hex":"103100044d5154540502003c00002466346134363835622d623035332d343562642d396534662d666238323866653362646534","method":"","user_agent":"","ja3":"1987606153939a4c0ccc1465ecf8e431","session":"0613561a-c528-4508-beb8-1e0600835f58","seq":1,"duration_ms":194,"bytes_in":51,"bytes_out":13,"enriched":{"digest":"f0e03e0286566b2f","label":"MQTT","strings":["MQTT","$f4a4685b-b053-45bd-9e4f-fb828fe3bde4","<$f4a4685b-b053-45bd-9e4f-fb828fe3bde4"]}},{"timestamp":"2026-09-23T20:32:32","port":8883,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u0010$\u0000\u0006MQIsdp\u0003\u0002\u0000<\u0000\u00166HfghFgQnl7ZuixHVEIm4B","payload_hex":"102400064d51497364700302003c001636486667684667516e6c375a756978485645496d3442","method":"","user_agent":"","ja3":"1987606153939a4c0ccc1465ecf8e431","session":"f7408236-e2e3-461c-b0a4-fb7d9ee4ba01","seq":1,"duration_ms":193,"bytes_in":38,"bytes_out":13,"enriched":{"digest":"bacbd8b69bdaf23f","strings":["MQIsdp","6HfghFgQnl7ZuixHVEIm4B"]}},{"timestamp":"2026-09-23T20:32:32","port":8883,"proto":"tcp","app_proto":"tls","app_protocol":"mqtt","host":"","headers":"","body":"","sni":"","tls_cipher":"TLS_AES_128_GCM_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"","summary":"\u00100\u0000\u0004MQTT\u0004\u0002\u0000<\u0000$04200c49-9235-4b1a-987a-2828ea7d76d7","payload_hex":"103000044d5154540402003c002430343230306334392d393233352d346231612d393837612d323832386561376437366437","method":"","user_agent":"","ja3":"1987606153939a4c0ccc1465ecf8e431","session":"ff191e0c-e911-49e5-b234-357df094e715","seq":1,"duration_ms":194,"bytes_in":50,"bytes_out":13,"enriched":{"digest":"12224ced910edcbb","label":"MQTT","strings":["MQTT","$04200c49-9235-4b1a-987a-2828ea7d76d7","<$04200c49-9235-4b1a-987a-2828ea7d76d7"]}},{"timestamp":"2026-09-15T13:26:12","port":137,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"�\u0000\u0000\u0000","payload_hex":"81000000","method":"","user_agent":"","ja3":"","session":"2af51bab-b13e-42d6-81d3-2c82518c4178","seq":1,"duration_ms":100,"bytes_in":4,"bytes_out":13},{"timestamp":"2026-09-13T13:08:33","port":50996,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:50996\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3067.86 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303939360d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35322e302e333036372e3836205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/52.0.3067.86 Safari/537.32","ja3":"","session":"eb691aa5-5b4f-4b52-ac2b-f3fec01b1ed7","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":78},{"timestamp":"2026-08-16T16:57:48","port":179,"proto":"tcp","app_proto":"","app_protocol":"bgp","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"����������������\u00009\u0001\u0004\u0000\u0001\u0000�\u0001\u0001\u0001\u0001\u001c\u0002\u0006\u0001\u0004\u0000\u0001\u0000\u0001\u0002\u0002�\u0000\u0002\u0002\u0002\u0000\u0002\u0002F\u0000\u0002\u0006A\u0004\u0000\u0000\u0000\u0001","payload_hex":"ffffffffffffffffffffffffffffffff00390104000100b4010101011c02060104000100010202800002020200020246000206410400000001","method":"","user_agent":"","ja3":"","session":"2aedfadf-3330-427a-b4ac-6fdddb54b69d","seq":1,"duration_ms":100,"bytes_in":57,"bytes_out":13},{"timestamp":"2026-08-16T15:52:44","port":61000,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:61000\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3015.100 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a36313030300d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35342e302e333031352e313030205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/54.0.3015.100 Safari/537.32","ja3":"","session":"dfd4f834-99a1-4843-a428-fd0119831a76","seq":1,"duration_ms":100,"bytes_in":238,"bytes_out":78},{"timestamp":"2026-07-28T08:32:54","port":50995,"proto":"tcp","app_proto":"","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>:50995\",\"user-agent\":\"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3081.93 Safari/537.32\"}","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"/","summary":"","payload_hex":"474554202f20485454502f312e310d0a486f73743a20<HONEYPOT>3a35303939350d0a557365722d4167656e743a204d6f7a696c6c612f352e30202857696e646f7773204e5420362e323b656e2d555329204170706c655765624b69742f3533372e33322e333620284b48544d4c2c206c697665204765636b6f29204368726f6d652f35362e302e333038312e3933205361666172692f3533372e33320d0a4163636570742d456e636f64696e673a20677a69702c206465666c6174650d0a4163636570743a202a2f2a0d0a436f6e6e656374696f6e3a206b6565702d616c6976650d0a0d0a","method":"GET","user_agent":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/56.0.3081.93 Safari/537.32","ja3":"","session":"013dba43-1118-416e-a8ab-4270eb968be9","seq":1,"duration_ms":100,"bytes_in":237,"bytes_out":78},{"timestamp":"2026-07-08T06:01:14","port":23,"proto":"tcp","app_proto":"","app_protocol":"","host":"","headers":"","body":"","sni":"","tls_cipher":"","tls_version":"","alpn":[],"url_path":"","summary":"\r\n��\u0001��\u0003","payload_hex":"0d0afffe01fffe03","method":"","user_agent":"","ja3":"","session":"7cfa45d5-9946-47fa-939d-902d6e98e261","seq":1,"duration_ms":100,"bytes_in":8,"bytes_out":7}],"http_methods":[{"method":"GET","count":11}],"distinct_ports_total":13,"top_paths":[{"path":"/","count":11,"ports":9}],"distinct_paths_total":1,"top_snis":[],"top_hosts":[{"value":"192.3.118.146","count":1}],"top_alpns":[{"value":"http/1.1","count":4}],"banners":[],"credentials":[],"header_profile":{"signature":["Accept","Accept-Encoding","Connection","Host","User-Agent"],"representative":[{"name":"Accept","value":"*/*","notable":false},{"name":"Accept-Encoding","value":"gzip, deflate","notable":false},{"name":"Connection","value":"keep-alive","notable":false},{"name":"Host","value":"192.3.118.146:1443","notable":false},{"name":"User-Agent","value":"Mozilla/5.0 (Windows NT 6.2;en-US) AppleWebKit/537.32.36 (KHTML, live Gecko) Chrome/60.0.3016.85 Safari/537.32","notable":false}],"distinct_sets":1,"events_with_headers":4},"tags":[],"data_as_of":"2026-09-24T16:18:00.098433+00:00"}