feat: update bph iocs

author: hrbrmstr <bob@rud.is> 2026-08-17 07:45:20 -0400
committer: hrbrmstr <bob@rud.is> 2026-08-17 07:45:20 -0400
commit: 237f2d9330398e0a0628980056db6b09098d5f2f (patch)
tree: 09f16c0f363ee4a23bdc64cf3cfaab7562a80432 /kevlar/2026-08-17/honeylabs/events-AS14956.json
parent: 7439049b2d46c035fda40b27d3f64b0b9f48af8a (diff)
1 files changed, 1 insertions, 0 deletions
diff --git a/kevlar/2026-08-17/honeylabs/events-AS14956.json b/kevlar/2026-08-17/honeylabs/events-AS14956.json
new file mode 100644
index 0000000..d07a9e3
--- /dev/null
+++ b/kevlar/2026-08-17/honeylabs/events-AS14956.json
@@ -0,0 +1 @@
+[{"timestamp":"2026-08-16T18:58:24","event_id":"f5925d97-0f8e-48b8-9ef5-5e9e67ced38b","source_ip":"216.126.224.182","source_port":53964,"source_domain":"182.224.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5061,"network_protocol":"tls","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"t13d311000_e8f1e7e78f70_5ac7197df9d2","tls_client_ja3":"324fd1602f3b94ec04d7c605225eeb53","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_CHACHA20_POLY1305_SHA256","http_request_ja4h":"","tls_client_server_name":"<HONEYPOT>","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":132000000,"source_bytes":1287,"dest_bytes":15,"network_bytes":1302,"event_summary":"INVITE sip:+447861998332@<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 216.126.224.182:36624;branch=z9hG4bK-524287-1---29c9ff4fcf2f6c11;rport\r\nMax-Forwards: 70\r\nContact: <sip:1001@216.126.224.182:36624;ob;transport=tls>;+sip.instance=\"<urn:uuid:809AA184-2DBD-2D59-05B0-44397000A9C5>\"\r\nTo: <sip:+447861998332@<HONEYPOT>:5061>\r\nFrom: \"1001\"<sip:1001@<HONEYPOT>:5061>;tag=8131e32d\r\nCall-ID: 20tILMQDKk6AI8mWKsJBOA..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH\r\nContent-Type: application/sdp\r\nSupported: replaces, answermode, eventlist, outbound, path\r\nUser-Agent: PortSIP VoIP SDK\r\nAllow-Events: hold, talk, conference\r\nContent-Length: 571\r\n\r\nv=0\r\no=- 546478415 1 IN IP4 216.126.224.182\r\ns=ps\r\nc=IN IP4 216.126.224.182\r\nt=0 0\r\nm=audio 20008 RTP/AVP 0 8 18 97 3 98 9 100 99 102 121 105 101\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=yes\r\na=rtpmap:97 iLBC/8000\r\na=rtpmap:3 GSM/8000\r\na=rtpmap:98 AMR/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:100 SPEEX/8000\r\na=rtpmap:99 AMR-WB/16000\r\na=rtpmap:102 SPEEX/16000\r\na=rtpmap:121 G7221/16000\r\na=fmtp:121 bitrate=24000\r\na=rtpmap:105 opus/48000/2\r\na=fmtp:105 useinbandfec=1\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=sendrecv\r\n"},{"timestamp":"2026-08-16T18:46:43","event_id":"f360301c-3030-4b16-878e-3e9c98c054ea","source_ip":"216.126.224.182","source_port":57006,"source_domain":"182.224.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5061,"network_protocol":"tls","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"t13d311000_e8f1e7e78f70_5ac7197df9d2","tls_client_ja3":"324fd1602f3b94ec04d7c605225eeb53","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_AES_128_GCM_SHA256","http_request_ja4h":"","tls_client_server_name":"<HONEYPOT>","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":132000000,"source_bytes":1287,"dest_bytes":15,"network_bytes":1302,"event_summary":"INVITE sip:+447861998332@<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 216.126.224.182:45437;branch=z9hG4bK-524287-1---da809d3631816173;rport\r\nMax-Forwards: 70\r\nContact: <sip:1001@216.126.224.182:45437;ob;transport=tls>;+sip.instance=\"<urn:uuid:809AA184-2DBD-2D59-05B0-44397000A9C5>\"\r\nTo: <sip:+447861998332@<HONEYPOT>:5061>\r\nFrom: \"1001\"<sip:1001@<HONEYPOT>:5061>;tag=d7054c48\r\nCall-ID: hJuxw8owqJWPyqOn-oH8BQ..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH\r\nContent-Type: application/sdp\r\nSupported: replaces, answermode, eventlist, outbound, path\r\nUser-Agent: PortSIP VoIP SDK\r\nAllow-Events: hold, talk, conference\r\nContent-Length: 571\r\n\r\nv=0\r\no=- 546477714 1 IN IP4 216.126.224.182\r\ns=ps\r\nc=IN IP4 216.126.224.182\r\nt=0 0\r\nm=audio 20008 RTP/AVP 0 8 18 97 3 98 9 100 99 102 121 105 101\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=yes\r\na=rtpmap:97 iLBC/8000\r\na=rtpmap:3 GSM/8000\r\na=rtpmap:98 AMR/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:100 SPEEX/8000\r\na=rtpmap:99 AMR-WB/16000\r\na=rtpmap:102 SPEEX/16000\r\na=rtpmap:121 G7221/16000\r\na=fmtp:121 bitrate=24000\r\na=rtpmap:105 opus/48000/2\r\na=fmtp:105 useinbandfec=1\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=sendrecv\r\n"},{"timestamp":"2026-08-16T14:35:17","event_id":"2410f995-3a26-4f17-95a1-74699ce526d3","source_ip":"216.126.224.182","source_port":57795,"source_domain":"182.224.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5061,"network_protocol":"tls","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"t13d311000_e8f1e7e78f70_5ac7197df9d2","tls_client_ja3":"324fd1602f3b94ec04d7c605225eeb53","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_AES_128_GCM_SHA256","http_request_ja4h":"","tls_client_server_name":"<HONEYPOT>","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":232000000,"source_bytes":1290,"dest_bytes":15,"network_bytes":1305,"event_summary":"INVITE sip:+447861998332@<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 216.126.224.182:24450;branch=z9hG4bK-524287-1---6e81fd6ad769826d;rport\r\nMax-Forwards: 70\r\nContact: <sip:1001@216.126.224.182:24450;ob;transport=tls>;+sip.instance=\"<urn:uuid:809AA184-2DBD-2D59-05B0-44397000A9C5>\"\r\nTo: <sip:+447861998332@<HONEYPOT>:5061>\r\nFrom: \"1001\"<sip:1001@<HONEYPOT>:5061>;tag=acb0fb77\r\nCall-ID: C6SCSlfivpFgXQenwAocxQ..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH\r\nContent-Type: application/sdp\r\nSupported: replaces, answermode, eventlist, outbound, path\r\nUser-Agent: PortSIP VoIP SDK\r\nAllow-Events: hold, talk, conference\r\nContent-Length: 571\r\n\r\nv=0\r\no=- 546462628 1 IN IP4 216.126.224.182\r\ns=ps\r\nc=IN IP4 216.126.224.182\r\nt=0 0\r\nm=audio 20008 RTP/AVP 0 8 18 97 3 98 9 100 99 102 121 105 101\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=yes\r\na=rtpmap:97 iLBC/8000\r\na=rtpmap:3 GSM/8000\r\na=rtpmap:98 AMR/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:100 SPEEX/8000\r\na=rtpmap:99 AMR-WB/16000\r\na=rtpmap:102 SPEEX/16000\r\na=rtpmap:121 G7221/16000\r\na=fmtp:121 bitrate=24000\r\na=rtpmap:105 opus/48000/2\r\na=fmtp:105 useinbandfec=1\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=sendrecv\r\n"},{"timestamp":"2026-08-16T10:39:48","event_id":"90e080ff-58a3-42bc-aef3-e1e42a494ee1","source_ip":"144.172.107.146","source_port":58313,"source_domain":"146.107.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":8888,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":32,"dest_bytes":15,"network_bytes":47,"event_summary":"action=challenge&user=' OR 1=1--"},{"timestamp":"2026-08-16T07:26:58","event_id":"92cbbdbe-3bf8-4a3d-ba55-9d7526370991","source_ip":"144.172.107.146","source_port":62213,"source_domain":"146.107.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":8888,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":32,"dest_bytes":15,"network_bytes":47,"event_summary":"action=challenge&user=' OR 1=1--"},{"timestamp":"2026-08-16T04:16:20","event_id":"d477ab56-c94f-46a6-86d7-6c2f9fa991b2","source_ip":"172.86.117.139","source_port":62076,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/HNAP1/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"referer\":\"http://<HONEYPOT>/\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nr05en_52f0ef412755","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":314,"dest_bytes":79,"network_bytes":393,"event_summary":""},{"timestamp":"2026-08-16T04:16:19","event_id":"e8dc6665-5958-40a4-9985-723701cb7c0f","source_ip":"172.86.117.139","source_port":61910,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn05en_bbad0dd62a4d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":275,"dest_bytes":79,"network_bytes":354,"event_summary":""},{"timestamp":"2026-08-16T02:26:43","event_id":"6b1c8b63-b788-413b-a7f6-876287b41e93","source_ip":"216.126.224.182","source_port":64515,"source_domain":"182.224.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5061,"network_protocol":"tls","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"t13d311000_e8f1e7e78f70_5ac7197df9d2","tls_client_ja3":"324fd1602f3b94ec04d7c605225eeb53","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_AES_128_GCM_SHA256","http_request_ja4h":"","tls_client_server_name":"<HONEYPOT>","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":238000000,"source_bytes":1293,"dest_bytes":15,"network_bytes":1308,"event_summary":"INVITE sip:+447861998332@<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 216.126.224.182:47991;branch=z9hG4bK-524287-1---06d7bc4509534c67;rport\r\nMax-Forwards: 70\r\nContact: <sip:1001@216.126.224.182:47991;ob;transport=tls>;+sip.instance=\"<urn:uuid:809AA184-2DBD-2D59-05B0-44397000A9C5>\"\r\nTo: <sip:+447861998332@<HONEYPOT>:5061>\r\nFrom: \"1001\"<sip:1001@<HONEYPOT>:5061>;tag=e1540605\r\nCall-ID: YBvogYb-tD0R46YMzh6qNw..\r\nCSeq: 1 INVITE\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH\r\nContent-Type: application/sdp\r\nSupported: replaces, answermode, eventlist, outbound, path\r\nUser-Agent: PortSIP VoIP SDK\r\nAllow-Events: hold, talk, conference\r\nContent-Length: 571\r\n\r\nv=0\r\no=- 546418914 1 IN IP4 216.126.224.182\r\ns=ps\r\nc=IN IP4 216.126.224.182\r\nt=0 0\r\nm=audio 20008 RTP/AVP 0 8 18 97 3 98 9 100 99 102 121 105 101\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=yes\r\na=rtpmap:97 iLBC/8000\r\na=rtpmap:3 GSM/8000\r\na=rtpmap:98 AMR/8000\r\na=rtpmap:9 G722/8000\r\na=rtpmap:100 SPEEX/8000\r\na=rtpmap:99 AMR-WB/16000\r\na=rtpmap:102 SPEEX/16000\r\na=rtpmap:121 G7221/16000\r\na=fmtp:121 bitrate=24000\r\na=rtpmap:105 opus/48000/2\r\na=fmtp:105 useinbandfec=1\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=sendrecv\r\n"},{"timestamp":"2026-08-16T01:41:02","event_id":"09bd1baf-ea9d-47fa-a18e-ef946f771f7d","source_ip":"172.86.117.139","source_port":60459,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/HNAP1/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"referer\":\"http://<HONEYPOT>/\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nr05en_52f0ef412755","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":314,"dest_bytes":79,"network_bytes":393,"event_summary":""},{"timestamp":"2026-08-16T01:41:01","event_id":"5613cd3f-2a88-4ab4-bba5-228932cca37e","source_ip":"172.86.117.139","source_port":60239,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn05en_bbad0dd62a4d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":275,"dest_bytes":79,"network_bytes":354,"event_summary":""},{"timestamp":"2026-08-15T23:56:25","event_id":"134c3cc8-768f-4565-adb1-40b53e51106d","source_ip":"172.86.117.139","source_port":50948,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/HNAP1/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"referer\":\"http://<HONEYPOT>/\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nr05en_52f0ef412755","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":314,"dest_bytes":79,"network_bytes":393,"event_summary":""},{"timestamp":"2026-08-15T23:56:25","event_id":"b4c6da12-f31d-4e70-aa39-9bc1418fc7fa","source_ip":"172.86.117.139","source_port":50719,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn05en_bbad0dd62a4d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":275,"dest_bytes":79,"network_bytes":354,"event_summary":""},{"timestamp":"2026-08-15T23:37:12","event_id":"ea1fb6b8-edb1-476e-8558-9ef172654273","source_ip":"172.86.117.139","source_port":62678,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/HNAP1/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"referer\":\"http://<HONEYPOT>/\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nr05en_52f0ef412755","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":314,"dest_bytes":79,"network_bytes":393,"event_summary":""},{"timestamp":"2026-08-15T23:37:12","event_id":"9c60adf4-55c2-4fe4-be54-30e42721bc8e","source_ip":"172.86.117.139","source_port":62566,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn05en_bbad0dd62a4d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":275,"dest_bytes":79,"network_bytes":354,"event_summary":""},{"timestamp":"2026-08-15T23:27:26","event_id":"1eef827f-6a9b-4626-ae50-4c8eee8d4b96","source_ip":"172.86.117.139","source_port":60405,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/HNAP1/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"referer\":\"http://<HONEYPOT>/\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nr05en_52f0ef412755","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":314,"dest_bytes":79,"network_bytes":393,"event_summary":""},{"timestamp":"2026-08-15T23:27:25","event_id":"f6f30537-7aad-49b9-8711-e9d562d2aaff","source_ip":"172.86.117.139","source_port":60179,"source_domain":"139.117.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\"accept-encoding\":\"deflate, gzip, identity\",\"accept-language\":\"en-US;q=0.6,en;q=0.4\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn05en_bbad0dd62a4d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":275,"dest_bytes":79,"network_bytes":354,"event_summary":""},{"timestamp":"2026-08-15T22:44:20","event_id":"52a43d94-a3a8-440a-a0b8-242603d3add8","source_ip":"144.172.116.49","source_port":59520,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":498000000,"source_bytes":455,"dest_bytes":56,"network_bytes":511,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T22:44:20","event_id":"52a43d94-a3a8-440a-a0b8-242603d3add8","source_ip":"144.172.116.49","source_port":59520,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":366000000,"source_bytes":373,"dest_bytes":42,"network_bytes":415,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-15T22:44:19","event_id":"52a43d94-a3a8-440a-a0b8-242603d3add8","source_ip":"144.172.116.49","source_port":59520,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":233000000,"source_bytes":277,"dest_bytes":28,"network_bytes":305,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T22:44:19","event_id":"52a43d94-a3a8-440a-a0b8-242603d3add8","source_ip":"144.172.116.49","source_port":59520,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":137,"dest_bytes":14,"network_bytes":151,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T22:44:16","event_id":"dd001782-5b91-4eff-8781-0aca44cf0aed","source_ip":"144.172.116.49","source_port":58747,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":498000000,"source_bytes":364,"dest_bytes":56,"network_bytes":420,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-15T22:44:16","event_id":"dd001782-5b91-4eff-8781-0aca44cf0aed","source_ip":"144.172.116.49","source_port":58747,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":366000000,"source_bytes":286,"dest_bytes":42,"network_bytes":328,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\144.172.116.113\\IPC$\u0000?????\u0000TH_REPLACE__?????\u0000"},{"timestamp":"2026-08-15T22:44:16","event_id":"dd001782-5b91-4eff-8781-0aca44cf0aed","source_ip":"144.172.116.49","source_port":58747,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":233000000,"source_bytes":191,"dest_bytes":28,"network_bytes":219,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-15T22:44:16","event_id":"dd001782-5b91-4eff-8781-0aca44cf0aed","source_ip":"144.172.116.49","source_port":58747,"source_domain":"49.116.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":88,"dest_bytes":14,"network_bytes":102,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T22:11:31","event_id":"6b5a40b2-2904-4b3b-b81f-8bd6c2f9e5e7","source_ip":"144.172.99.148","source_port":56586,"source_domain":"148.99.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Staten Island","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":9200,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"python-requests/2.34.2","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, zstd\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9200\",\"user-agent\":\"python-requests/2.34.2\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0500_cac2c496544b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":149,"dest_bytes":79,"network_bytes":228,"event_summary":""},{"timestamp":"2026-08-15T21:54:30","event_id":"4c3590ab-e386-42f0-aa57-fe20df22148c","source_ip":"107.189.22.104","source_port":37338,"source_domain":"104.22.189.107.static.cloudzy.com","country_code":"NL","country_name":"The Netherlands","city_name":"Zaandam","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5060,"network_protocol":"tls","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"t12i280600_bbd4f008d9b2_f28add8e7af0","tls_client_ja3":"043c543b63b895881d9abfbc320cb863","tls_client_version":"TLSv1.2","tls_client_cipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":117000000,"source_bytes":385,"dest_bytes":79,"network_bytes":464,"event_summary":"OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TLS 107.189.22.104:37338;branch=z9hG4bKa22def49b10b402884edb1c200c783bb;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"1001\" <sip:1001@107.189.22.104>;tag=809383558\r\nCall-ID: cc73bc23cfdd4573a5edbf058af80b5f\r\nContact: <sip:1002@107.189.22.104:37338>\r\nUser-Agent: Asterisk PBX\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"},{"timestamp":"2026-08-15T21:51:38","event_id":"9c735823-01ea-412c-8a4b-85fb8db4581f","source_ip":"144.172.99.148","source_port":58820,"source_domain":"148.99.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Staten Island","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":9200,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"python-requests/2.34.2","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate, zstd\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:9200\",\"user-agent\":\"python-requests/2.34.2\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0500_cac2c496544b","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":149,"dest_bytes":79,"network_bytes":228,"event_summary":""},{"timestamp":"2026-08-15T05:51:55","event_id":"1c6a6005-aa54-4e3f-8fa0-f18ac1aaadd0","source_ip":"153.75.94.130","source_port":52906,"source_domain":"","country_code":"SG","country_name":"Singapore","city_name":"Singapore","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5060,"network_protocol":"","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":382,"dest_bytes":78,"network_bytes":460,"event_summary":"OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TCP 153.75.94.130:52906;branch=z9hG4bK8c8be8b18f814c1e9ba684d39e85ea82;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"1001\" <sip:1001@153.75.94.130>;tag=529609453\r\nCall-ID: 0f891a15e55244a1b96511622bafbdd8\r\nContact: <sip:1002@153.75.94.130:52906>\r\nUser-Agent: Asterisk PBX\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"},{"timestamp":"2026-08-15T05:01:19","event_id":"29b9b0f8-3c9e-4d14-8c18-06690c157e97","source_ip":"172.86.91.225","source_port":56438,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":469000000,"source_bytes":455,"dest_bytes":52,"network_bytes":507,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T05:01:18","event_id":"29b9b0f8-3c9e-4d14-8c18-06690c157e97","source_ip":"172.86.91.225","source_port":56438,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":346000000,"source_bytes":373,"dest_bytes":39,"network_bytes":412,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-15T05:01:18","event_id":"29b9b0f8-3c9e-4d14-8c18-06690c157e97","source_ip":"172.86.91.225","source_port":56438,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":223000000,"source_bytes":277,"dest_bytes":26,"network_bytes":303,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T05:01:18","event_id":"29b9b0f8-3c9e-4d14-8c18-06690c157e97","source_ip":"172.86.91.225","source_port":56438,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":137,"dest_bytes":13,"network_bytes":150,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T05:01:15","event_id":"f1a96704-29c3-413c-b80e-67178ad05702","source_ip":"172.86.91.225","source_port":55630,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":470000000,"source_bytes":364,"dest_bytes":52,"network_bytes":416,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-15T05:01:15","event_id":"f1a96704-29c3-413c-b80e-67178ad05702","source_ip":"172.86.91.225","source_port":55630,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":347000000,"source_bytes":286,"dest_bytes":39,"network_bytes":325,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\172.86.91.3\\IPC$\u0000?????\u0000EEPATH_REPLACE__?????\u0000"},{"timestamp":"2026-08-15T05:01:15","event_id":"f1a96704-29c3-413c-b80e-67178ad05702","source_ip":"172.86.91.225","source_port":55630,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":224000000,"source_bytes":191,"dest_bytes":26,"network_bytes":217,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-15T05:01:15","event_id":"f1a96704-29c3-413c-b80e-67178ad05702","source_ip":"172.86.91.225","source_port":55630,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":88,"dest_bytes":13,"network_bytes":101,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T04:33:42","event_id":"7ecb90d1-ee21-4b2c-b9c4-788021e31214","source_ip":"172.86.89.13","source_port":65447,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":470000000,"source_bytes":455,"dest_bytes":48,"network_bytes":503,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T04:33:42","event_id":"7ecb90d1-ee21-4b2c-b9c4-788021e31214","source_ip":"172.86.89.13","source_port":65447,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":347000000,"source_bytes":373,"dest_bytes":36,"network_bytes":409,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-15T04:33:42","event_id":"7ecb90d1-ee21-4b2c-b9c4-788021e31214","source_ip":"172.86.89.13","source_port":65447,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":223000000,"source_bytes":277,"dest_bytes":24,"network_bytes":301,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T04:33:42","event_id":"7ecb90d1-ee21-4b2c-b9c4-788021e31214","source_ip":"172.86.89.13","source_port":65447,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":137,"dest_bytes":12,"network_bytes":149,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T04:33:39","event_id":"4dd76ab4-8eb3-475a-80b7-33b3298d5987","source_ip":"172.86.89.13","source_port":64622,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":471000000,"source_bytes":364,"dest_bytes":48,"network_bytes":412,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-15T04:33:39","event_id":"4dd76ab4-8eb3-475a-80b7-33b3298d5987","source_ip":"172.86.89.13","source_port":64622,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":348000000,"source_bytes":286,"dest_bytes":36,"network_bytes":322,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\172.86.91.3\\IPC$\u0000?????\u0000EEPATH_REPLACE__?????\u0000"},{"timestamp":"2026-08-15T04:33:39","event_id":"4dd76ab4-8eb3-475a-80b7-33b3298d5987","source_ip":"172.86.89.13","source_port":64622,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":225000000,"source_bytes":191,"dest_bytes":24,"network_bytes":215,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-15T04:33:39","event_id":"4dd76ab4-8eb3-475a-80b7-33b3298d5987","source_ip":"172.86.89.13","source_port":64622,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":88,"dest_bytes":12,"network_bytes":100,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T03:42:54","event_id":"c7ec7fec-3d50-43db-858e-31fc6606582b","source_ip":"172.86.89.13","source_port":58081,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":469000000,"source_bytes":455,"dest_bytes":48,"network_bytes":503,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T03:42:54","event_id":"c7ec7fec-3d50-43db-858e-31fc6606582b","source_ip":"172.86.89.13","source_port":58081,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":346000000,"source_bytes":373,"dest_bytes":36,"network_bytes":409,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-15T03:42:54","event_id":"c7ec7fec-3d50-43db-858e-31fc6606582b","source_ip":"172.86.89.13","source_port":58081,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":223000000,"source_bytes":277,"dest_bytes":24,"network_bytes":301,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T03:42:53","event_id":"c7ec7fec-3d50-43db-858e-31fc6606582b","source_ip":"172.86.89.13","source_port":58081,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":137,"dest_bytes":12,"network_bytes":149,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T03:42:50","event_id":"9a600ece-bc2c-45e3-b688-bf3a64e743b3","source_ip":"172.86.89.13","source_port":57317,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":471000000,"source_bytes":364,"dest_bytes":48,"network_bytes":412,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-15T03:42:50","event_id":"9a600ece-bc2c-45e3-b688-bf3a64e743b3","source_ip":"172.86.89.13","source_port":57317,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":348000000,"source_bytes":286,"dest_bytes":36,"network_bytes":322,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\172.86.91.3\\IPC$\u0000?????\u0000EEPATH_REPLACE__?????\u0000"},{"timestamp":"2026-08-15T03:42:50","event_id":"9a600ece-bc2c-45e3-b688-bf3a64e743b3","source_ip":"172.86.89.13","source_port":57317,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":224000000,"source_bytes":191,"dest_bytes":24,"network_bytes":215,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-15T03:42:50","event_id":"9a600ece-bc2c-45e3-b688-bf3a64e743b3","source_ip":"172.86.89.13","source_port":57317,"source_domain":"13.89.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":88,"dest_bytes":12,"network_bytes":100,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T03:06:17","event_id":"4e2c4917-3a13-4f72-9b8f-8ccb1674f340","source_ip":"172.86.91.225","source_port":58290,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":468000000,"source_bytes":455,"dest_bytes":52,"network_bytes":507,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T03:06:17","event_id":"4e2c4917-3a13-4f72-9b8f-8ccb1674f340","source_ip":"172.86.91.225","source_port":58290,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":345000000,"source_bytes":373,"dest_bytes":39,"network_bytes":412,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-15T03:06:17","event_id":"4e2c4917-3a13-4f72-9b8f-8ccb1674f340","source_ip":"172.86.91.225","source_port":58290,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":223000000,"source_bytes":277,"dest_bytes":26,"network_bytes":303,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T03:06:17","event_id":"4e2c4917-3a13-4f72-9b8f-8ccb1674f340","source_ip":"172.86.91.225","source_port":58290,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":137,"dest_bytes":13,"network_bytes":150,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T03:06:14","event_id":"7ea6ed52-449b-4cec-b5a5-58ab10ec275a","source_ip":"172.86.91.225","source_port":57492,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":471000000,"source_bytes":364,"dest_bytes":52,"network_bytes":416,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-15T03:06:14","event_id":"7ea6ed52-449b-4cec-b5a5-58ab10ec275a","source_ip":"172.86.91.225","source_port":57492,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":347000000,"source_bytes":286,"dest_bytes":39,"network_bytes":325,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\172.86.91.3\\IPC$\u0000?????\u0000EEPATH_REPLACE__?????\u0000"},{"timestamp":"2026-08-15T03:06:14","event_id":"7ea6ed52-449b-4cec-b5a5-58ab10ec275a","source_ip":"172.86.91.225","source_port":57492,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":224000000,"source_bytes":191,"dest_bytes":26,"network_bytes":217,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-15T03:06:13","event_id":"7ea6ed52-449b-4cec-b5a5-58ab10ec275a","source_ip":"172.86.91.225","source_port":57492,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":88,"dest_bytes":13,"network_bytes":101,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T02:30:57","event_id":"b8751cd5-3bce-4f5e-baa3-cac2cf064fb0","source_ip":"172.86.91.225","source_port":56761,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":469000000,"source_bytes":455,"dest_bytes":52,"network_bytes":507,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T02:30:57","event_id":"b8751cd5-3bce-4f5e-baa3-cac2cf064fb0","source_ip":"172.86.91.225","source_port":56761,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":346000000,"source_bytes":373,"dest_bytes":39,"network_bytes":412,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-15T02:30:57","event_id":"b8751cd5-3bce-4f5e-baa3-cac2cf064fb0","source_ip":"172.86.91.225","source_port":56761,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":223000000,"source_bytes":277,"dest_bytes":26,"network_bytes":303,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-15T02:30:56","event_id":"b8751cd5-3bce-4f5e-baa3-cac2cf064fb0","source_ip":"172.86.91.225","source_port":56761,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":137,"dest_bytes":13,"network_bytes":150,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T02:30:53","event_id":"8b995269-fc01-4c06-a20a-fde7bd95dd05","source_ip":"172.86.91.225","source_port":55946,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":469000000,"source_bytes":364,"dest_bytes":52,"network_bytes":416,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-15T02:30:53","event_id":"8b995269-fc01-4c06-a20a-fde7bd95dd05","source_ip":"172.86.91.225","source_port":55946,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":346000000,"source_bytes":286,"dest_bytes":39,"network_bytes":325,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\172.86.91.3\\IPC$\u0000?????\u0000EEPATH_REPLACE__?????\u0000"},{"timestamp":"2026-08-15T02:30:53","event_id":"8b995269-fc01-4c06-a20a-fde7bd95dd05","source_ip":"172.86.91.225","source_port":55946,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":224000000,"source_bytes":191,"dest_bytes":26,"network_bytes":217,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-15T02:30:53","event_id":"8b995269-fc01-4c06-a20a-fde7bd95dd05","source_ip":"172.86.91.225","source_port":55946,"source_domain":"225.91.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":88,"dest_bytes":13,"network_bytes":101,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-15T01:56:10","event_id":"28a24072-80d9-48e6-aeaa-01175cc16bb4","source_ip":"216.126.224.182","source_port":58060,"source_domain":"182.224.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5061,"network_protocol":"tls","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"t13d311000_e8f1e7e78f70_5ac7197df9d2","tls_client_ja3":"324fd1602f3b94ec04d7c605225eeb53","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_AES_128_GCM_SHA256","http_request_ja4h":"","tls_client_server_name":"<HONEYPOT>","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":240000000,"source_bytes":687,"dest_bytes":15,"network_bytes":702,"event_summary":"REGISTER sip:<HONEYPOT>:5061 SIP/2.0\r\nVia: SIP/2.0/TLS 216.126.224.182:35512;branch=z9hG4bK-524287-1---fc0ab2434b0ec655;rport\r\nMax-Forwards: 70\r\nContact: <sip:1001@216.126.224.182:35512;transport=tls>;+sip.instance=\"<urn:uuid:809AA184-2DBD-2D59-05B0-44397000A9C5>\"\r\nTo: \"1001\"<sip:1001@<HONEYPOT>:5061>\r\nFrom: \"1001\"<sip:1001@<HONEYPOT>:5061>;tag=13bcc047\r\nCall-ID: gpBBBHG22vB9mtlZnusHGw..\r\nCSeq: 1 REGISTER\r\nExpires: 120\r\nAllow: INVITE, ACK, CANCEL, OPTIONS, BYE, REFER, NOTIFY, MESSAGE, REGISTER, SUBSCRIBE, INFO, PUBLISH\r\nSupported: replaces, answermode, eventlist, outbound, path\r\nUser-Agent: PortSIP VoIP SDK\r\nAllow-Events: hold, talk, conference\r\nContent-Length: 0\r\n\r\n"},{"timestamp":"2026-08-15T00:12:02","event_id":"4ea81ade-1b3a-49da-91b3-bcdef173a69b","source_ip":"45.61.150.67","source_port":40671,"source_domain":"67.150.61.45.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":443,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","url_path":"/.env","url_domain":"<HONEYPOT>","http_request_headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}","ssh_client_hassh":"","tls_client_ja4":"t13i100900_61a7ad8aa9b6_88aa062a14c8","tls_client_ja3":"92e3065cf9444ba90adc1bce4206011c","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_CHACHA20_POLY1305_SHA256","http_request_ja4h":"ge11nn0300_7fd797acd99d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":186,"dest_bytes":77,"network_bytes":263,"event_summary":""},{"timestamp":"2026-08-15T00:06:42","event_id":"c2980a3c-df93-4d5a-843e-b31aa5d4ecf6","source_ip":"45.61.150.67","source_port":34381,"source_domain":"67.150.61.45.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":443,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","url_path":"/.env","url_domain":"<HONEYPOT>","http_request_headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}","ssh_client_hassh":"","tls_client_ja4":"t13i100900_61a7ad8aa9b6_88aa062a14c8","tls_client_ja3":"92e3065cf9444ba90adc1bce4206011c","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_CHACHA20_POLY1305_SHA256","http_request_ja4h":"ge11nn0300_7fd797acd99d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":186,"dest_bytes":77,"network_bytes":263,"event_summary":""},{"timestamp":"2026-08-15T00:02:09","event_id":"72bb590e-50b1-4cf5-a96a-217a6527c038","source_ip":"45.61.150.67","source_port":42493,"source_domain":"67.150.61.45.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":443,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","url_path":"/.env","url_domain":"<HONEYPOT>","http_request_headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}","ssh_client_hassh":"","tls_client_ja4":"t13i100900_61a7ad8aa9b6_88aa062a14c8","tls_client_ja3":"92e3065cf9444ba90adc1bce4206011c","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_CHACHA20_POLY1305_SHA256","http_request_ja4h":"ge11nn0300_7fd797acd99d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":186,"dest_bytes":77,"network_bytes":263,"event_summary":""},{"timestamp":"2026-08-14T16:31:30","event_id":"6cd9bb42-e12c-40de-8bc2-f8e476a39ed8","source_ip":"107.189.17.174","source_port":55582,"source_domain":"174.17.189.107.static.cloudzy.com","country_code":"NL","country_name":"The Netherlands","city_name":"Zaandam","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":5060,"network_protocol":"","application_protocol":"sip","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":383,"dest_bytes":79,"network_bytes":462,"event_summary":"OPTIONS sip:<HONEYPOT>:5060 SIP/2.0\r\nVia: SIP/2.0/TCP 107.189.17.174:55582;branch=z9hG4bKb846f6e9b8ea4e609563e7dd7771effd;rport\r\nMax-Forwards: 70\r\nTo: <sip:<HONEYPOT>:5060>\r\nFrom: \"1001\" <sip:1001@107.189.17.174>;tag=731522532\r\nCall-ID: d1c516a85e414c3fa5b44a3f445e009c\r\nContact: <sip:1002@107.189.17.174:55582>\r\nUser-Agent: Asterisk PBX\r\nCSeq: 1 OPTIONS\r\nContent-Length: 0\r\n\r\n"},{"timestamp":"2026-08-14T05:54:31","event_id":"164bc1c9-22e5-4a25-9a3f-d1d663f4c4d4","source_ip":"216.126.239.72","source_port":39818,"source_domain":"72.239.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":1723,"network_protocol":"","application_protocol":"pptp","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":156,"dest_bytes":14,"network_bytes":170,"event_summary":"\u0000�\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003��\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-14T00:06:39","event_id":"1197fa95-be54-4bd5-a081-540c3d2f83cd","source_ip":"153.75.85.203","source_port":49728,"source_domain":"","country_code":"NL","country_name":"The Netherlands","city_name":"Zaandam","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko","url_path":"/cgi-bin/magicBox.cgi?action=getDeviceType","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0500_2d30dc89d981","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":1961000000,"source_bytes":832,"dest_bytes":312,"network_bytes":1144,"event_summary":""},{"timestamp":"2026-08-14T00:06:38","event_id":"1197fa95-be54-4bd5-a081-540c3d2f83cd","source_ip":"153.75.85.203","source_port":49728,"source_domain":"","country_code":"NL","country_name":"The Netherlands","city_name":"Zaandam","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko","url_path":"/ISAPI/System/deviceInfo","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0500_2d30dc89d981","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":1247000000,"source_bytes":599,"dest_bytes":234,"network_bytes":833,"event_summary":""},{"timestamp":"2026-08-14T00:06:38","event_id":"1197fa95-be54-4bd5-a081-540c3d2f83cd","source_ip":"153.75.85.203","source_port":49728,"source_domain":"","country_code":"NL","country_name":"The Netherlands","city_name":"Zaandam","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0500_2d30dc89d981","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":1002000000,"source_bytes":384,"dest_bytes":156,"network_bytes":540,"event_summary":""},{"timestamp":"2026-08-14T00:06:37","event_id":"1197fa95-be54-4bd5-a081-540c3d2f83cd","source_ip":"153.75.85.203","source_port":49728,"source_domain":"","country_code":"NL","country_name":"The Netherlands","city_name":"Zaandam","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":80,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept\":\"*/*\",\"accept-encoding\":\"gzip, deflate\",\"connection\":\"keep-alive\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0500_2d30dc89d981","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":192,"dest_bytes":78,"network_bytes":270,"event_summary":""},{"timestamp":"2026-08-13T16:42:55","event_id":"bbf613ad-cb01-440d-abf8-fe74bb05ca25","source_ip":"167.88.168.121","source_port":49979,"source_domain":"121.168.88.167.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":8888,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8888\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0400_9c3956fad5da","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":169,"dest_bytes":79,"network_bytes":248,"event_summary":""},{"timestamp":"2026-08-13T11:42:58","event_id":"830cf8e4-6318-4f04-9c08-ce6ab64b8964","source_ip":"45.61.150.67","source_port":33949,"source_domain":"67.150.61.45.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":443,"network_protocol":"tls","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36","url_path":"/.env","url_domain":"<HONEYPOT>","http_request_headers":"{\"connection\":\"close\",\"host\":\"<HONEYPOT>\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36\"}","ssh_client_hassh":"","tls_client_ja4":"t13i100900_61a7ad8aa9b6_88aa062a14c8","tls_client_ja3":"92e3065cf9444ba90adc1bce4206011c","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_CHACHA20_POLY1305_SHA256","http_request_ja4h":"ge11nn0300_7fd797acd99d","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":186,"dest_bytes":77,"network_bytes":263,"event_summary":""},{"timestamp":"2026-08-13T07:15:52","event_id":"7a5a9aa7-ce8f-4d93-b8a6-7592d08389be","source_ip":"167.88.168.121","source_port":37940,"source_domain":"121.168.88.167.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":8001,"network_protocol":"","application_protocol":"http","http_method":"GET","user_agent":"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0","url_path":"/","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8001\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"ge11nn0400_9c3956fad5da","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":169,"dest_bytes":79,"network_bytes":248,"event_summary":""},{"timestamp":"2026-08-13T02:09:20","event_id":"c3bb2337-72f0-46c1-8986-b506a549be90","source_ip":"216.126.236.232","source_port":57104,"source_domain":"232.236.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":1723,"network_protocol":"","application_protocol":"pptp","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":156,"dest_bytes":15,"network_bytes":171,"event_summary":"\u0000�\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003��\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-12T08:40:40","event_id":"3b1382aa-c43a-478e-8970-98f2b03344c9","source_ip":"167.88.168.121","source_port":40524,"source_domain":"121.168.88.167.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Dallas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":1080,"network_protocol":"","application_protocol":"socks5","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":3,"dest_bytes":14,"network_bytes":17,"event_summary":"\u0005\u0001\u0000"},{"timestamp":"2026-08-11T19:47:11","event_id":"58f720c7-158d-4825-b747-0473a099f0ba","source_ip":"216.126.239.150","source_port":60807,"source_domain":"150.239.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":3389,"network_protocol":"","application_protocol":"rdp","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":19,"dest_bytes":15,"network_bytes":34,"event_summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"},{"timestamp":"2026-08-11T19:47:11","event_id":"d89cddae-d09f-4c53-b8b7-58b87c4342f8","source_ip":"216.126.239.150","source_port":60847,"source_domain":"150.239.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":3389,"network_protocol":"","application_protocol":"rdp","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":19,"dest_bytes":15,"network_bytes":34,"event_summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"},{"timestamp":"2026-08-11T19:45:28","event_id":"9a71898c-81b3-4b60-813f-5f367198a2d6","source_ip":"216.126.239.150","source_port":61021,"source_domain":"150.239.126.216.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":3389,"network_protocol":"","application_protocol":"rdp","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":19,"dest_bytes":15,"network_bytes":34,"event_summary":"\u0003\u0000\u0000\u0013\u000e�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\u0000\u0003\u0000\u0000\u0000"},{"timestamp":"2026-08-11T17:51:43","event_id":"12f34cd9-3da2-4df5-8b86-4eb311aabc88","source_ip":"172.86.119.138","source_port":57531,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":788000000,"source_bytes":455,"dest_bytes":56,"network_bytes":511,"event_summary":"\u0000\u0000\u0000N�SMB2\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000A\u0000\u000f\f\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u00014�\u0000\u0000\u0000\f\u0000B\u0000\u0000\u0000N\u0000\u0001\u0000\u000e\u0000\r\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"},{"timestamp":"2026-08-11T17:51:43","event_id":"12f34cd9-3da2-4df5-8b86-4eb311aabc88","source_ip":"172.86.119.138","source_port":57531,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":559000000,"source_bytes":373,"dest_bytes":42,"network_bytes":415,"event_summary":"\u0000\u0000\u0000\\�SMBu\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0004�\u0000\\\u0000\b\u0000\u0001\u00001\u0000\u0000\\\u0000\\\u00001\u00009\u00002\u0000.\u00001\u00006\u00008\u0000.\u00005\u00006\u0000.\u00002\u00000\u0000\\\u0000I\u0000P\u0000C\u0000$\u0000\u0000\u0000?????\u0000"},{"timestamp":"2026-08-11T17:51:43","event_id":"12f34cd9-3da2-4df5-8b86-4eb311aabc88","source_ip":"172.86.119.138","source_port":57531,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":329000000,"source_bytes":277,"dest_bytes":28,"network_bytes":305,"event_summary":"\u0000\u0000\u0000��SMBs\u0000\u0000\u0000\u0000\u0018\u0007�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\r�\u0000�\u0000\u0004\u0011\n\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000�\u0000\u0000\u0000K\u0000\u0000\u0000\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00002\u00001\u00009\u00005\u0000\u0000\u0000W\u0000i\u0000n\u0000d\u0000o\u0000w\u0000s\u0000 \u00002\u00000\u00000\u00000\u0000 \u00005\u0000.\u00000\u0000\u0000\u0000"},{"timestamp":"2026-08-11T17:51:42","event_id":"12f34cd9-3da2-4df5-8b86-4eb311aabc88","source_ip":"172.86.119.138","source_port":57531,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":137,"dest_bytes":14,"network_bytes":151,"event_summary":"\u0000\u0000\u0000��SMBr\u0000\u0000\u0000\u0000\u0018S�\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000��\u0000\u0000@\u0000\u0000b\u0000\u0002PC NETWORK PROGRAM 1.0\u0000\u0002LANMAN1.0\u0000\u0002Windows for Workgroups 3.1a\u0000\u0002LM1.2X002\u0000\u0002LANMAN2.1\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-11T17:51:39","event_id":"0a6cadc3-1f65-41c6-b5a2-d7a7e9fd4211","source_ip":"172.86.119.138","source_port":56667,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":4,"event_duration":792000000,"source_bytes":364,"dest_bytes":56,"network_bytes":420,"event_summary":"\u0000\u0000\u0000J�SMB%\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0010\u0000\u0000\u0000\u0000����\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000J\u0000\u0000\u0000J\u0000\u0002\u0000#\u0000\u0000\u0000\u0007\u0000\\PIPE\\\u0000"},{"timestamp":"2026-08-11T17:51:39","event_id":"0a6cadc3-1f65-41c6-b5a2-d7a7e9fd4211","source_ip":"172.86.119.138","source_port":56667,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":561000000,"source_bytes":286,"dest_bytes":42,"network_bytes":328,"event_summary":"\u0000\u0000\u0000[�SMBu\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u0004�\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u001c\u0000\u0000\\\\172.86.119.130\\IPC$\u0000?????\u0000ATH_REPLACE__?????\u0000"},{"timestamp":"2026-08-11T17:51:39","event_id":"0a6cadc3-1f65-41c6-b5a2-d7a7e9fd4211","source_ip":"172.86.119.138","source_port":56667,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"smbv1","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":330000000,"source_bytes":191,"dest_bytes":28,"network_bytes":219,"event_summary":"\u0000\u0000\u0000c�SMBs\u0000\u0000\u0000\u0000\u0018\u0001 \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\r�\u0000\u0000\u0000��\u0002\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000@\u0000\u0000\u0000&\u0000\u0000.\u0000Windows 2000 2195\u0000Windows 2000 5.0\u0000"},{"timestamp":"2026-08-11T17:51:38","event_id":"0a6cadc3-1f65-41c6-b5a2-d7a7e9fd4211","source_ip":"172.86.119.138","source_port":56667,"source_domain":"138.119.86.172.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Ogden","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":445,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":88,"dest_bytes":14,"network_bytes":102,"event_summary":"\u0000\u0000\u0000T�SMBr\u0000\u0000\u0000\u0000\u0018\u0001(\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000/K\u0000\u0000�^\u00001\u0000\u0002LANMAN1.0\u0000\u0002LM1.2X002\u0000\u0002NT LANMAN 1.0\u0000\u0002NT LM 0.12\u0000"},{"timestamp":"2026-08-11T15:36:33","event_id":"84f90fa9-3664-402b-919d-e68700e2c3a5","source_ip":"144.172.104.239","source_port":37332,"source_domain":"239.104.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":25565,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":4562000000,"source_bytes":66,"dest_bytes":45,"network_bytes":111,"event_summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000"},{"timestamp":"2026-08-11T15:36:31","event_id":"84f90fa9-3664-402b-919d-e68700e2c3a5","source_ip":"144.172.104.239","source_port":37332,"source_domain":"239.104.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":25565,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":2331000000,"source_bytes":44,"dest_bytes":30,"network_bytes":74,"event_summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000"},{"timestamp":"2026-08-11T15:36:29","event_id":"84f90fa9-3664-402b-919d-e68700e2c3a5","source_ip":"144.172.104.239","source_port":37332,"source_domain":"239.104.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":25565,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":22,"dest_bytes":15,"network_bytes":37,"event_summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000"},{"timestamp":"2026-08-11T15:36:09","event_id":"4f5d3675-22f7-4305-8c5e-509125739224","source_ip":"144.172.104.239","source_port":52614,"source_domain":"239.104.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":25565,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":3,"event_duration":4568000000,"source_bytes":66,"dest_bytes":45,"network_bytes":111,"event_summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000"},{"timestamp":"2026-08-11T15:36:07","event_id":"4f5d3675-22f7-4305-8c5e-509125739224","source_ip":"144.172.104.239","source_port":52614,"source_domain":"239.104.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":25565,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":2,"event_duration":2334000000,"source_bytes":44,"dest_bytes":30,"network_bytes":74,"event_summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000"},{"timestamp":"2026-08-11T15:36:05","event_id":"4f5d3675-22f7-4305-8c5e-509125739224","source_ip":"144.172.104.239","source_port":52614,"source_domain":"239.104.172.144.static.cloudzy.com","country_code":"US","country_name":"United States","city_name":"Las Vegas","asn_number":14956,"asn_org":"RouterHosting LLC","dest_port":25565,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":22,"dest_bytes":15,"network_bytes":37,"event_summary":"\u0013\u0000/\r<HONEYPOT>c�\u0001\u0001\u0000"}]
+\ No newline at end of file
author	hrbrmstr <bob@rud.is>	2026-08-17 07:45:20 -0400
committer	hrbrmstr <bob@rud.is>	2026-08-17 07:45:20 -0400
commit	237f2d9330398e0a0628980056db6b09098d5f2f (patch)
tree	09f16c0f363ee4a23bdc64cf3cfaab7562a80432 /kevlar/2026-08-17/honeylabs/events-AS14956.json
parent	7439049b2d46c035fda40b27d3f64b0b9f48af8a (diff)