{"ip":"85.90.246.159","total_events":240,"verdict":{"verdict":"scanning","label":"Unrecognized scanner","detail":"10+ ports swept","confidence":"medium","network_type":"CDN","why":["No exploit payloads observed.","Swept 10 distinct ports (threshold for a sweep is 10).","Not in any known-scanner range."],"engagement":{"level":"payload","label":"Sustained payload","detail":"222,061 bytes sent","bytes_sent":222061,"session_seconds":0,"persistent":false}},"first_seen":"2026-02-18T00:24:33","last_seen":"2026-09-23T06:56:32","events_24h":3,"events_7d":3,"geo":{"country_code":"DE","country_name":"Germany","region":"Hesse","city":"Frankfurt am Main","lat":50.1169,"lon":8.6837,"asn":63949,"org":"Akamai Connected Cloud"},"source_domain":"85-90-246-159.ip.linodeusercontent.com","known_scanners":[],"scanner_tag":{"key":"linode","label":"Linode (Akamai)","category":"hosting_provider","url":"https://www.linode.com/"},"cve_matches":[],"malware":[],"top_ports":[{"port":443,"proto":"tcp","label":"HTTPS","count":74},{"port":992,"proto":"tcp","label":"","count":67},{"port":5555,"proto":"tcp","label":"","count":54},{"port":33888,"proto":"tcp","label":"","count":26},{"port":80,"proto":"tcp","label":"HTTP","count":4},{"port":9010,"proto":"tcp","label":"","count":4},{"port":8443,"proto":"tcp","label":"HTTPS-alt","count":3},{"port":8010,"proto":"tcp","label":"","count":3},{"port":8080,"proto":"tcp","label":"HTTP-alt","count":3},{"port":33889,"proto":"tcp","label":"","count":2}],"fingerprints":{"ssh_hassh":[],"tls_ja4":["t13i190800_9dc949149365_97f8aa674fd9"],"tls_client_hello":"16030100ee010000ea0303badbdb529b4290d862fe8f5b22160eab9cf5a97c0d1f72ba10f8fe2ebfbcf274209ca16b5ad5aad748a10563534cc10e5412a821b8f7e4790de8038e5b5203d1600026cca8cca9c02fc030c02bc02cc013c009c014c00a009c009d002f0035c012000a1303130113020100007b000500050100000000000a000a0008001d001700180019000b00020100000d001a0018080404030807080508060401050106010503060302010203ff0100010000120000002b0009080304030303020301003300260024001d0020d9854c7f404ccd2584efe728428cc383d90c86bd96962ed327ac706f","tls_ja3":["35fa0a83e466acbec1cfbb9016d550ab"],"http_akin":["a11cuq051_0000060a_f421b8ce"]},"fingerprint_peers":{"t13i190800_9dc949149365_97f8aa674fd9":2948,"a11cuq051_0000060a_f421b8ce":1},"akin_families":{},"user_agents":["GIFTEDVISITOR SCAN","Mozilla/5.0 zgrab/0.x"],"timeline":[{"date":"2026-06-25","count":2},{"date":"2026-06-26","count":4},{"date":"2026-06-27","count":3},{"date":"2026-06-29","count":7},{"date":"2026-07-01","count":4},{"date":"2026-07-03","count":3},{"date":"2026-07-06","count":4},{"date":"2026-07-08","count":4},{"date":"2026-07-09","count":3},{"date":"2026-07-10","count":3},{"date":"2026-07-13","count":4},{"date":"2026-07-15","count":4},{"date":"2026-07-16","count":2},{"date":"2026-07-17","count":3},{"date":"2026-07-20","count":4},{"date":"2026-07-22","count":4},{"date":"2026-07-24","count":3},{"date":"2026-07-27","count":4},{"date":"2026-07-29","count":4},{"date":"2026-07-31","count":3},{"date":"2026-08-03","count":4},{"date":"2026-08-05","count":4},{"date":"2026-08-06","count":3},{"date":"2026-08-07","count":5},{"date":"2026-08-10","count":6},{"date":"2026-08-11","count":5},{"date":"2026-08-12","count":6},{"date":"2026-08-14","count":3},{"date":"2026-08-17","count":4},{"date":"2026-08-19","count":4},{"date":"2026-08-21","count":3},{"date":"2026-08-24","count":4},{"date":"2026-09-23","count":3}],"recent_events":[{"timestamp":"2026-09-23T06:56:32","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"257c1c4e-dcbc-4db3-8aad-2fa811590aa4","seq":1,"duration_ms":101,"bytes_in":1827,"bytes_out":78},{"timestamp":"2026-09-23T05:47:25","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>0d0a582d53534c2d56504e3a20310d0a0d0a474946383961c8003300f20000363734796854808080af7f5bb3a89dd5d5d4ffffff0000002c00000000c80033000003fe081adc340a04416b65314f1180f960288e64699e68aaae6ceb9a4be30c0c256f56a7e9d2ebffc0a070c88adc2c9cc605c731662404a2744aad4e05b10d61cb25d4b8491be619b19acfe8f4072b1174098578fc0d6e909fea02811235ef296a812c040a6e5c72887a7a6f4d7719257116712f05920695802248167d98029a7c820616237f02056b487023157d1f98a8217f8789b58b7c7b3c8e239e9bae2bad20a6ac9b14b1c32115b1819e229eaec5992096afc6a070b6b65b031c168e6521bd9bcb2a9ecbc1e1d1a7a96ee9d682cdc9cad5d1aebdcb7facb4d973343776df3cc89a07424e384cab0afa1217ea5205120cdb35d3f3ced92c7213b74022e8feb061c74fec407e94f650133683a86a79f977e31b28691b55091b678a1aa952c55071428231dab456159d71bc19f227493eef3c4edb92ed52bf01fe024495b16ba032720a25721ce511993c5f3361727593922842a37d729a20688a1c3a733fe1848255eae4a5bb89de4c6030750c9e97d48cc6323bb464d67146457e3c67b83020b829823d73e7931eaa3f91d689609ac86936a81ba4fe230351edc7c48719b7a3cc132d65d5b1224adebaf6a1577a0bb3963d95af2e4abc2ab9256109101c24537dbca233e0157258c5afad8a845c13f1ed13e668573f85b5f758c3b23aa754b9878698bda38dd7ce44d4f174da448506257c54ec57e82618fe2abafeb9fee6cd8800570b54fe20311a0f011494d0616995140f3bae5c371656cfbd14a161120ea6147688bd44a13cf604769078e4812680700f10a7c461952dc65c45ce89281b341cc5e8d164aface21c0ae2ece7624ce4b40551809304e78f70016ca1620dfe75f8c1763d55545d27d1e02313643b6e67cd8e2820515a50f24589df2bb578260717048ae6465f2c1d84dc24bc60d61d781f25a4e57f755e66189773f001a784278858a109dec505093f88a07924540f80c66607a2442ae9a423223ac7360d0cd02881a0b544e9a7a0a271523670e825559a9c46e58f40a1b6ea6a10a39e499e92a7a6caa9a7afe6aaeb0aa54e99571db56e8aea18bb166bac3e7120fe4816365d24c1a9b069ea70ecb4c626d9450d1c8c0a2c81d0762a2db5e0be9aa421b90c476e9fb5daea28b1258854d2988dd5a70931f625334a489f8034a60a7456a1af0f6d1027411b4c79a12e5f9daa67ef1ad330bcf0bdeedeeb3057f3364cc2bf125bbc6f97169bb1b10a59c8309cc8db689aea02092b7071c715b39271be1a673cf157f8c26c14c4eeb22733bc3ac32c2fc4ec8c25f1bbfd7e10b212c4915b32544614b7f2cc0fcf1b71c44083f230c6fa929235c35343875fd7a970ddb0ce62576df6984d8b3c32d2e4a68ab05f4fcb1c75cc6557bd2fd9433becf5c4f96aed72cb36bf2cb8627e9f2df8086987b1f63f6baa0b9ac27cb7fbf7e063fec72735dd18d36d36d472531ef9d41ddb1cf8e8242cb0440e2c99de6d9a90ef1c7acb9ebb1e35e979cb9d39e9f08ead7bd886530dc8bfa0736e8012399c2772073ab4ed76eb5ec344f84df1ee0dd8cd7af7fdd0ef1ae3fd12f56007bdb3cfa2e39db901a69f6e7c0d18e8602db4ec4e1e77b8817c9c06f117d8606e68032fa068542a4bfe3efc6a901f1aca57bfd0982b09f90380216ed53a003a300d04b41f0e8ee0172348f0116720dcf7def53ff9792952027c601a7037bbb5c0ee7d2194420a45e8b1d8b96e6be0139a0c5996b59cd9506cbe3b4ae758280a1226067861eb59e47ef8b9dde1ac8865ab170f0318330dc6ce8714ab980dd933c5c0d9ad55703b5ce208a127bbbc056f73b6d39c1461273ac06911849773a21783b83baa0df18b501ce215cfd8c33496108683ab2119bd37430ece4e87e3a363b85628c84282b068864ca42217c9c8463af291908ca424759500003b53167078e6d7513d6368f566a70b86e4864df5a5a88e823d4f84ba661305f2b643edf8b8fc3b0bd00f7b5bf633bda270acb990fb8b5d711f6dfb2b02e8db4e90060051ae38fa80b21108b639a0f04e329627c9d563b9c8c50282191929546f377dfd289a1eaa213d401ad38276baba123b330d635ee5716984755c05285663c4a4f94ebdb53df721717ba49614efdd424de95ac1b9c28ff097b96d933e9347500cb12a2bb491c5f8b76b9a1578b7c0bad81a7caa338e2e1e69cb86d0f171c98f54ff98fdb69e30000a2ae7d5305a71d5b4b4e88552ac8d0cc39f7e5f898cc5454345bf8b452d76cef361f8c8d9483025a2e2079bb56cfa446a4ec4c6737671269a30c7e08f15d5a042c4664d3a18c3f705","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"5b8fd118-3325-46ce-a4a0-cd63923d0865","seq":1,"duration_ms":100,"bytes_in":1828,"bytes_out":78},{"timestamp":"2026-09-23T05:34:23","port":443,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"185.228.81.201","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"185.228.81.201\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"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","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"685844cd-8f11-479b-90ad-abdf86cfde3e","seq":1,"duration_ms":100,"bytes_in":1829,"bytes_out":78},{"timestamp":"2026-08-24T03:23:53","port":992,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"52d00e66-7186-4382-9038-bc42c60cb09f","seq":1,"duration_ms":101,"bytes_in":1827,"bytes_out":78},{"timestamp":"2026-08-24T03:23:20","port":992,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"762e357d-61da-4515-a837-d41cbb524912","seq":1,"duration_ms":100,"bytes_in":1829,"bytes_out":78},{"timestamp":"2026-08-24T03:14:58","port":992,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"43cfa060-2eef-4fbe-916c-aeacfaf84966","seq":1,"duration_ms":100,"bytes_in":1828,"bytes_out":78},{"timestamp":"2026-08-24T03:09:57","port":992,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>0d0a582d53534c2d56504e3a20310d0a0d0a474946383961c8003300f20000363734796854808080af7f5bb3a89dd5d5d4ffffff0000002c00000000c80033000003fe081adc340a04416b65314f1180f960288e64699e68aaae6ceb9a4be30c0c256f56a7e9d2ebffc0a070c88adc2c9cc605c731662404a2744aad4e05b10d61cb25d4b8491be619b19acfe8f4072b1174098578fc0d6e909fea02811235ef296a812c040a6e5c72887a7a6f4d7719257116712f05920695802248167d98029a7c820616237f02056b487023157d1f98a8217f8789b58b7c7b3c8e239e9bae2bad20a6ac9b14b1c32115b1819e229eaec5992096afc6a070b6b65b031c168e6521bd9bcb2a9ecbc1e1d1a7a96ee9d682cdc9cad5d1aebdcb7facb4d973343776df3cc89a07424e384cab0afa1217ea5205120cdb35d3f3ced92c7213b74022e8feb061c74fec407e94f650133683a86a79f977e31b28691b55091b678a1aa952c55071428231dab456159d71bc19f227493eef3c4edb92ed52bf01fe024495b16ba032720a25721ce511993c5f3361727593922842a37d729a20688a1c3a733fe1848255eae4a5bb89de4c6030750c9e97d48cc6323bb464d67146457e3c67b83020b829823d73e7931eaa3f91d689609ac86936a81ba4fe230351edc7c48719b7a3cc132d65d5b1224adebaf6a1577a0bb3963d95af2e4abc2ab9256109101c24537dbca233e0157258c5afad8a845c13f1ed13e668573f85b5f758c3b23aa754b9878698bda38dd7ce44d4f174da448506257c54ec57e82618fe2abafeb9fee6cd8800570b54fe20311a0f011494d0616995140f3bae5c371656cfbd14a161120ea6147688bd44a13cf604769078e4812680700f10a7c461952dc65c45ce89281b341cc5e8d164aface21c0ae2ece7624ce4b40551809304e78f70016ca1620dfe75f8c1763d55545d27d1e02313643b6e67cd8e2820515a50f24589df2bb578260717048ae6465f2c1d84dc24bc60d61d781f25a4e57f755e66189773f001a784278858a109dec505093f88a07924540f80c66607a2442ae9a423223ac7360d0cd02881a0b544e9a7a0a271523670e825559a9c46e58f40a1b6ea6a10a39e499e92a7a6caa9a7afe6aaeb0aa54e99571db56e8aea18bb166bac3e7120fe4816365d24c1a9b069ea70ecb4c626d9450d1c8c0a2c81d0762a2db5e0be9aa421b90c476e9fb5daea28b1258854d2988dd5a70931f625334a489f8034a60a7456a1af0f6d1027411b4c79a12e5f9daa67ef1ad330bcf0bdeedeeb3057f3364cc2bf125bbc6f97169bb1b10a59c8309cc8db689aea02092b7071c715b39271be1a673cf157f8c26c14c4eeb22733bc3ac32c2fc4ec8c25f1bbfd7e10b212c4915b32544614b7f2cc0fcf1b71c44083f230c6fa929235c35343875fd7a970ddb0ce62576df6984d8b3c32d2e4a68ab05f4fcb1c75cc6557bd2fd9433becf5c4f96aed72cb36bf2cb8627e9f2df8086987b1f63f6baa0b9ac27cb7fbf7e063fec72735dd18d36d36d472531ef9d41ddb1cf8e8242cb0440e2c99de6d9a90ef1c7acb9ebb1e35e979cb9d39e9f08ead7bd886530dc8bfa0736e8012399c2772073ab4ed76eb5ec344f84df1ee0dd8cd7af7fdd0ef1ae3fd12f56007bdb3cfa2e39db901a69f6e7c0d18e8602db4ec4e1e77b8817c9c06f117d8606e68032fa068542a4bfe3efc6a901f1aca57bfd0982b09f90380216ed53a003a300d04b41f0e8ee0172348f0116720dcf7def53ff9792952027c601a7037bbb5c0ee7d2194420a45e8b1d8b96e6be0139a0c5996b59cd9506cbe3b4ae758280a1226067861eb59e47ef8b9dde1ac8865ab170f0318330dc6ce8714ab980dd933c5c0d9ad55703b5ce208a127bbbc056f73b6d39c1461273ac06911849773a21783b83baa0df18b501ce215cfd8c33496108683ab2119bd37430ece4e87e3a363b85628c84282b068864ca42217c9c8463af291908ca424759500003b53167078e6d7513d6368f566a70b86e4864df5a5a88e823d4f84ba661305f2b643edf8b8fc3b0bd00f7b5bf633bda270acb990fb8b5d711f6dfb2b02e8db4e90060051ae38fa80b21108b639a0f04e329627c9d563b9c8c50282191929546f377dfd289a1eaa213d401ad38276baba123b330d635ee5716984755c05285663c4a4f94ebdb53df721717ba49614efdd424de95ac1b9c28ff097b96d933e9347500cb12a2bb491c5f8b76b9a1578b7c0bad81a7caa338e2e1e69cb86d0f171c98f54ff98fdb69e30000a2ae7d5305a71d5b4b4e88552ac8d0cc39f7e5f898cc5454345bf8b452d76cef361f8c8d9483025a2e2079bb56cfa446a4ec4c6737671269a30c7e08f15d5a042c4664d3a18c3f705","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"b761d9d7-cdef-4ea7-930f-d2b6b0ff9e06","seq":1,"duration_ms":101,"bytes_in":1827,"bytes_out":78},{"timestamp":"2026-08-21T03:16:01","port":5555,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>0d0a582d53534c2d56504e3a20310d0a0d0a474946383961c8003300f20000363734796854808080af7f5bb3a89dd5d5d4ffffff0000002c00000000c80033000003fe081adc340a04416b65314f1180f960288e64699e68aaae6ceb9a4be30c0c256f56a7e9d2ebffc0a070c88adc2c9cc605c731662404a2744aad4e05b10d61cb25d4b8491be619b19acfe8f4072b1174098578fc0d6e909fea02811235ef296a812c040a6e5c72887a7a6f4d7719257116712f05920695802248167d98029a7c820616237f02056b487023157d1f98a8217f8789b58b7c7b3c8e239e9bae2bad20a6ac9b14b1c32115b1819e229eaec5992096afc6a070b6b65b031c168e6521bd9bcb2a9ecbc1e1d1a7a96ee9d682cdc9cad5d1aebdcb7facb4d973343776df3cc89a07424e384cab0afa1217ea5205120cdb35d3f3ced92c7213b74022e8feb061c74fec407e94f650133683a86a79f977e31b28691b55091b678a1aa952c55071428231dab456159d71bc19f227493eef3c4edb92ed52bf01fe024495b16ba032720a25721ce511993c5f3361727593922842a37d729a20688a1c3a733fe1848255eae4a5bb89de4c6030750c9e97d48cc6323bb464d67146457e3c67b83020b829823d73e7931eaa3f91d689609ac86936a81ba4fe230351edc7c48719b7a3cc132d65d5b1224adebaf6a1577a0bb3963d95af2e4abc2ab9256109101c24537dbca233e0157258c5afad8a845c13f1ed13e668573f85b5f758c3b23aa754b9878698bda38dd7ce44d4f174da448506257c54ec57e82618fe2abafeb9fee6cd8800570b54fe20311a0f011494d0616995140f3bae5c371656cfbd14a161120ea6147688bd44a13cf604769078e4812680700f10a7c461952dc65c45ce89281b341cc5e8d164aface21c0ae2ece7624ce4b40551809304e78f70016ca1620dfe75f8c1763d55545d27d1e02313643b6e67cd8e2820515a50f24589df2bb578260717048ae6465f2c1d84dc24bc60d61d781f25a4e57f755e66189773f001a784278858a109dec505093f88a07924540f80c66607a2442ae9a423223ac7360d0cd02881a0b544e9a7a0a271523670e825559a9c46e58f40a1b6ea6a10a39e499e92a7a6caa9a7afe6aaeb0aa54e99571db56e8aea18bb166bac3e7120fe4816365d24c1a9b069ea70ecb4c626d9450d1c8c0a2c81d0762a2db5e0be9aa421b90c476e9fb5daea28b1258854d2988dd5a70931f625334a489f8034a60a7456a1af0f6d1027411b4c79a12e5f9daa67ef1ad330bcf0bdeedeeb3057f3364cc2bf125bbc6f97169bb1b10a59c8309cc8db689aea02092b7071c715b39271be1a673cf157f8c26c14c4eeb22733bc3ac32c2fc4ec8c25f1bbfd7e10b212c4915b32544614b7f2cc0fcf1b71c44083f230c6fa929235c35343875fd7a970ddb0ce62576df6984d8b3c32d2e4a68ab05f4fcb1c75cc6557bd2fd9433becf5c4f96aed72cb36bf2cb8627e9f2df8086987b1f63f6baa0b9ac27cb7fbf7e063fec72735dd18d36d36d472531ef9d41ddb1cf8e8242cb0440e2c99de6d9a90ef1c7acb9ebb1e35e979cb9d39e9f08ead7bd886530dc8bfa0736e8012399c2772073ab4ed76eb5ec344f84df1ee0dd8cd7af7fdd0ef1ae3fd12f56007bdb3cfa2e39db901a69f6e7c0d18e8602db4ec4e1e77b8817c9c06f117d8606e68032fa068542a4bfe3efc6a901f1aca57bfd0982b09f90380216ed53a003a300d04b41f0e8ee0172348f0116720dcf7def53ff9792952027c601a7037bbb5c0ee7d2194420a45e8b1d8b96e6be0139a0c5996b59cd9506cbe3b4ae758280a1226067861eb59e47ef8b9dde1ac8865ab170f0318330dc6ce8714ab980dd933c5c0d9ad55703b5ce208a127bbbc056f73b6d39c1461273ac06911849773a21783b83baa0df18b501ce215cfd8c33496108683ab2119bd37430ece4e87e3a363b85628c84282b068864ca42217c9c8463af291908ca424759500003b53167078e6d7513d6368f566a70b86e4864df5a5a88e823d4f84ba661305f2b643edf8b8fc3b0bd00f7b5bf633bda270acb990fb8b5d711f6dfb2b02e8db4e90060051ae38fa80b21108b639a0f04e329627c9d563b9c8c50282191929546f377dfd289a1eaa213d401ad38276baba123b330d635ee5716984755c05285663c4a4f94ebdb53df721717ba49614efdd424de95ac1b9c28ff097b96d933e9347500cb12a2bb491c5f8b76b9a1578b7c0bad81a7caa338e2e1e69cb86d0f171c98f54ff98fdb69e30000a2ae7d5305a71d5b4b4e88552ac8d0cc39f7e5f898cc5454345bf8b452d76cef361f8c8d9483025a2e2079bb56cfa446a4ec4c6737671269a30c7e08f15d5a042c4664d3a18c3f705","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"1f8a4c8d-9738-4739-8d91-54f63a681543","seq":1,"duration_ms":100,"bytes_in":1827,"bytes_out":78},{"timestamp":"2026-08-21T02:48:06","port":5555,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>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","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"f225f655-d872-4646-8650-16157f6bcdab","seq":1,"duration_ms":101,"bytes_in":1827,"bytes_out":78},{"timestamp":"2026-08-21T02:31:20","port":5555,"proto":"tcp","app_proto":"tls","app_protocol":"http","host":"<HONEYPOT>","headers":"{\"connection\":\"Keep-Alive\",\"content-length\":\"1684\",\"content-type\":\"image/jpeg\",\"host\":\"<HONEYPOT>\",\"x-ssl-vpn\":\"1\"}","body":"GIF89a�\u00003\u0000�\u0000\u0000674yhT����[���������\u0000\u0000\u0000,\u0000\u0000\u0000\u0000�\u00003\u0000\u0000\u0003�\b\u001a�4\n\u0004Ake1O\u0011��`(�di�h��l��K�\f\f%oV�������pȊ�,��\u0005�1f$\u0004�tJ�N\u0005�\ra�%ԸI\u001b�\u0019�����\u0007+\u0011t\t�x�\rn���\u0002�\u00125�)j�,\u0004\nn\\r�zzoMw\u0019%q\u0016q/\u0005�\u0006��\"H\u0016}�\u0002�|�\u0006\u0016#\u0002\u0005kHp#\u0015}\u001f��!����|{<�#���+� ���\u0014��!\u0015���\"��ř ��Ơp��[\u0003\u001c\u0016�e!���*����ѧ�n�ւ����Ѯ�����s47v�<Ț\u0007BN8L�\n�\u0012\u0017�R\u0005\u0012\f�5����,r\u0013�@\"���a�O�@~��P\u00136��jy�w�\u001b(i\u001bU\t\u001bg�\u001a�R�PqB�1ڴV\u0015�q�\u0019�'I>�<Nے�R�\u0001�\u0002D��k�2r\n%r\u001c�\u0011�<_3aru��(B�}r� h�\u001c:s?ᄂU�䥻��L`0u\f��Ԍ�2;�d�qFE~<g�0 �)�=s��\u001e�?�։`��i6�\u001b��#\u0003Q��ć\u0019���\u0013-eձ\"J޺��Wz\u000b��=��.J�*�%a\t\u0010\u001c$S}��3�\u0015rXů���\\\u0013��\u0013�hW?���Xò:�T���������D��t�D�\u0006%|T�W�&\u0018�*�����͈\u0000W\u000bT� 1\u001a\u000f\u0001\u0014��ai�\u0014\u000f;�\\7\u0016VϽ\u0014�a\u0012\u000e�\u0014v��D�<�\u0004v�x��&�p\u000f\u0010��a�-�\\EΉ(\u001b4\u001c���d���\u001c\n���bL��\u0005Q��\u0004��p\u0001l�b\r�u��v=UT]'��#\u0013d;ng͎( QZP�E��+�x&\u0007\u0017\u0004��F_,\u001d��$�`�\u001dx\u001f%��u^f\u0018�s�\u0001��'�X�\t��\u0005\t?��y$T\u000f��f\u0007�D*��#\":�6\r\f�(���D駠�qR6p�%U��F��@���j\u0010��I����ʩ�����\n�N�W\u001d�n��\u0018�\u0016k�>q �H\u00166]$���i�p���&�E\r\u001c�\n,��v*-�ྚ�!�\fGn����(�%�TҘ�է\t1�%3JH��4�\ntV��\u000fm\u0010'A\u001bLy�._��g�\u001a�0������0W�6L¿\u0012[�o�\u0016���\nY�0���h��\u0002\t+pq�\u0015��q�\u001ag<�W��l\u0014���'3�:�,/���%���~\u0010�\u0012đ[2TF\u0014���\u000f�\u001bq�@��0����5�SC�_שpݰ�bWm��M�<2�䦊�_O�\u001cu�eW�/�C;����j�r�6�,�b~�-�\bi���?k�\u000b��|����c��'5�\u0018�m6�rS\u001e��\u001d�\u001c��$,�D\u000e,��m���\u001cz˞�\u001e5�y˝9����{؆S\rȿ�sn�\u00129�'r\u0007:��v�^�D�M��\r��z����\u001a��\u0012�`\u0007��Ϣ㝹\u0001��n|\r\u0018�`-��N\u001ew��|�\u0006�\u0017�`nh\u0003/�hT*K�>�j�\u001f\u001a�W�И+\t�\u0003�!n�:\u0000:0\r\u0004�\u001f\u000e��\u0017#H�\u0011g ����?�y)R\u0002|`\u001ap7����}!�B\nE��عnk�\u0013�\fY����Pl�;J�X(\n\u0012&\u0006xa�Y�~���ᬈe�\u0017\u000f\u0003\u00183\r�·\u0014��\r�3��٭Up;\\�\b�'��\u0005os�Ӝ\u0014a':�i\u0011��s�\u0017��;�\r��P\u001c�\u0015���4�\u0010���!\u0019�7C\u000e�N���c�V(�B��h�L�\"\u0017��F:򑐌�$u�\u0000\u0000;S\u0016px��Q=ch�f�\u000b���M�����=O��f\u0013\u0005��C����;\u000b�\u000f{[�3��p�����]q\u001fm�+\u0002��N�\u0006\u0000Q�8���\u0011\b�9��N2�'��c���\u0002�\u0019\u0019)To7}�(�\u001e�!=@\u001aӂv��\u0012;3\rc^�qi�u\\\u0005(VcĤ�N��=�!q{��\u0014��BM�Z�����m�>�GP\f�*+�����k�\u0015x����\u001a|�3�.\u001eiˆ��qɏT�����0\u0000\n*��0Zqմ���R��\fß~_���ECE��E-v��a���H0%��\u0007��l�DjN��svq&�0���\u0015ՠB�fM:\u0018��\u0005","sni":"","tls_cipher":"TLS_CHACHA20_POLY1305_SHA256","tls_version":"TLSv1.3","alpn":[],"url_path":"/vpnsvc/connect.cgi","summary":"","payload_hex":"504f5354202f76706e7376632f636f6e6e6563742e63676920485454502f312e310d0a436f6e6e656374696f6e3a204b6565702d416c6976650d0a436f6e74656e742d4c656e6774683a20313638340d0a436f6e74656e742d547970653a20696d6167652f6a7065670d0a486f73743a20<HONEYPOT>0d0a582d53534c2d56504e3a20310d0a0d0a474946383961c8003300f20000363734796854808080af7f5bb3a89dd5d5d4ffffff0000002c00000000c80033000003fe081adc340a04416b65314f1180f960288e64699e68aaae6ceb9a4be30c0c256f56a7e9d2ebffc0a070c88adc2c9cc605c731662404a2744aad4e05b10d61cb25d4b8491be619b19acfe8f4072b1174098578fc0d6e909fea02811235ef296a812c040a6e5c72887a7a6f4d7719257116712f05920695802248167d98029a7c820616237f02056b487023157d1f98a8217f8789b58b7c7b3c8e239e9bae2bad20a6ac9b14b1c32115b1819e229eaec5992096afc6a070b6b65b031c168e6521bd9bcb2a9ecbc1e1d1a7a96ee9d682cdc9cad5d1aebdcb7facb4d973343776df3cc89a07424e384cab0afa1217ea5205120cdb35d3f3ced92c7213b74022e8feb061c74fec407e94f650133683a86a79f977e31b28691b55091b678a1aa952c55071428231dab456159d71bc19f227493eef3c4edb92ed52bf01fe024495b16ba032720a25721ce511993c5f3361727593922842a37d729a20688a1c3a733fe1848255eae4a5bb89de4c6030750c9e97d48cc6323bb464d67146457e3c67b83020b829823d73e7931eaa3f91d689609ac86936a81ba4fe230351edc7c48719b7a3cc132d65d5b1224adebaf6a1577a0bb3963d95af2e4abc2ab9256109101c24537dbca233e0157258c5afad8a845c13f1ed13e668573f85b5f758c3b23aa754b9878698bda38dd7ce44d4f174da448506257c54ec57e82618fe2abafeb9fee6cd8800570b54fe20311a0f011494d0616995140f3bae5c371656cfbd14a161120ea6147688bd44a13cf604769078e4812680700f10a7c461952dc65c45ce89281b341cc5e8d164aface21c0ae2ece7624ce4b40551809304e78f70016ca1620dfe75f8c1763d55545d27d1e02313643b6e67cd8e2820515a50f24589df2bb578260717048ae6465f2c1d84dc24bc60d61d781f25a4e57f755e66189773f001a784278858a109dec505093f88a07924540f80c66607a2442ae9a423223ac7360d0cd02881a0b544e9a7a0a271523670e825559a9c46e58f40a1b6ea6a10a39e499e92a7a6caa9a7afe6aaeb0aa54e99571db56e8aea18bb166bac3e7120fe4816365d24c1a9b069ea70ecb4c626d9450d1c8c0a2c81d0762a2db5e0be9aa421b90c476e9fb5daea28b1258854d2988dd5a70931f625334a489f8034a60a7456a1af0f6d1027411b4c79a12e5f9daa67ef1ad330bcf0bdeedeeb3057f3364cc2bf125bbc6f97169bb1b10a59c8309cc8db689aea02092b7071c715b39271be1a673cf157f8c26c14c4eeb22733bc3ac32c2fc4ec8c25f1bbfd7e10b212c4915b32544614b7f2cc0fcf1b71c44083f230c6fa929235c35343875fd7a970ddb0ce62576df6984d8b3c32d2e4a68ab05f4fcb1c75cc6557bd2fd9433becf5c4f96aed72cb36bf2cb8627e9f2df8086987b1f63f6baa0b9ac27cb7fbf7e063fec72735dd18d36d36d472531ef9d41ddb1cf8e8242cb0440e2c99de6d9a90ef1c7acb9ebb1e35e979cb9d39e9f08ead7bd886530dc8bfa0736e8012399c2772073ab4ed76eb5ec344f84df1ee0dd8cd7af7fdd0ef1ae3fd12f56007bdb3cfa2e39db901a69f6e7c0d18e8602db4ec4e1e77b8817c9c06f117d8606e68032fa068542a4bfe3efc6a901f1aca57bfd0982b09f90380216ed53a003a300d04b41f0e8ee0172348f0116720dcf7def53ff9792952027c601a7037bbb5c0ee7d2194420a45e8b1d8b96e6be0139a0c5996b59cd9506cbe3b4ae758280a1226067861eb59e47ef8b9dde1ac8865ab170f0318330dc6ce8714ab980dd933c5c0d9ad55703b5ce208a127bbbc056f73b6d39c1461273ac06911849773a21783b83baa0df18b501ce215cfd8c33496108683ab2119bd37430ece4e87e3a363b85628c84282b068864ca42217c9c8463af291908ca424759500003b53167078e6d7513d6368f566a70b86e4864df5a5a88e823d4f84ba661305f2b643edf8b8fc3b0bd00f7b5bf633bda270acb990fb8b5d711f6dfb2b02e8db4e90060051ae38fa80b21108b639a0f04e329627c9d563b9c8c50282191929546f377dfd289a1eaa213d401ad38276baba123b330d635ee5716984755c05285663c4a4f94ebdb53df721717ba49614efdd424de95ac1b9c28ff097b96d933e9347500cb12a2bb491c5f8b76b9a1578b7c0bad81a7caa338e2e1e69cb86d0f171c98f54ff98fdb69e30000a2ae7d5305a71d5b4b4e88552ac8d0cc39f7e5f898cc5454345bf8b452d76cef361f8c8d9483025a2e2079bb56cfa446a4ec4c6737671269a30c7e08f15d5a042c4664d3a18c3f705","method":"POST","user_agent":"","ja3":"35fa0a83e466acbec1cfbb9016d550ab","session":"de4e69a4-2744-4908-9feb-502c6b7dfd31","seq":1,"duration_ms":100,"bytes_in":1828,"bytes_out":78}],"http_methods":[{"method":"POST","count":167},{"method":"GET","count":25}],"distinct_ports_total":10,"top_paths":[{"path":"/vpnsvc/connect.cgi","count":166,"ports":3},{"path":"/","count":25,"ports":2},{"path":"/api/v1/cav/client/visits","count":1,"ports":1}],"distinct_paths_total":3,"top_snis":[],"top_hosts":[{"value":"185.228.81.201","count":1}],"top_alpns":[],"banners":[],"credentials":[],"header_profile":{"signature":["Connection","Content-Length","Content-Type","Host","X-Ssl-Vpn"],"representative":[{"name":"Connection","value":"Keep-Alive","notable":false},{"name":"Content-Length","value":"1684","notable":false},{"name":"Content-Type","value":"image/jpeg","notable":true},{"name":"Host","value":"<HONEYPOT>","notable":false},{"name":"X-Ssl-Vpn","value":"1","notable":true}],"distinct_sets":1,"events_with_headers":10},"tags":[],"data_as_of":"2026-09-23T17:00:31.238081+00:00"}