diff options
Diffstat (limited to 'kevlar/2026-08-31/honeylabs/events-AS51852.ndjson')
| -rw-r--r-- | kevlar/2026-08-31/honeylabs/events-AS51852.ndjson | 102 |
1 files changed, 102 insertions, 0 deletions
diff --git a/kevlar/2026-08-31/honeylabs/events-AS51852.ndjson b/kevlar/2026-08-31/honeylabs/events-AS51852.ndjson new file mode 100644 index 0000000..a7bc138 --- /dev/null +++ b/kevlar/2026-08-31/honeylabs/events-AS51852.ndjson @@ -0,0 +1,102 @@ +{"timestamp": "2026-08-24T22:38:47", "event_id": "371bef04-db65-47b8-a743-bf7b97fb9b76", "source_ip": "81.17.28.131", "source_port": 54774, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-24T22:38:47", "event_id": "ab8b6e0d-4c0e-41ad-a463-05282febee82", "source_ip": "81.17.28.131", "source_port": 49070, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T20:32:32", "event_id": "ae0ceca9-c273-44ad-b551-d114c3d297ca", "source_ip": "81.17.28.131", "source_port": 34620, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\u0000\"\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T15:31:30", "event_id": "113a91e4-8546-4ae9-8f46-065c9efd5a5d", "source_ip": "81.17.28.131", "source_port": 35958, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-24T15:31:29", "event_id": "70c215a8-a3aa-40b7-9e7a-be0a2880ac83", "source_ip": "81.17.28.131", "source_port": 40214, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:10:49", "event_id": "dfea8ef9-5f02-4c9d-afad-ea00f10ea11e", "source_ip": "141.255.165.67", "source_port": 35344, "source_domain": "cryptodocuments.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:10:19", "event_id": "824be3d2-25e8-4856-96f3-e09190eaece2", "source_ip": "141.255.165.67", "source_port": 57400, "source_domain": "cryptodocuments.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:07:48", "event_id": "a1dcd8de-760d-44ac-add6-377cc5221d51", "source_ip": "141.255.165.68", "source_port": 16960, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T04:07:17", "event_id": "17872c66-e089-48fa-bb92-ab9ececf177f", "source_ip": "141.255.165.68", "source_port": 39966, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T03:59:47", "event_id": "98974ba8-a9d7-470f-9675-a51c7b36ee52", "source_ip": "81.17.28.131", "source_port": 43566, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T03:14:20", "event_id": "0587f561-dd87-4a6b-9315-52cefaf64fca", "source_ip": "81.17.28.131", "source_port": 60568, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-24T03:14:20", "event_id": "7e106fb8-2915-4f34-bb6c-4aeff2e12bb1", "source_ip": "81.17.28.131", "source_port": 35932, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T02:23:36", "event_id": "cf72479e-2131-4957-9c59-045cdba5ca17", "source_ip": "81.17.28.131", "source_port": 38260, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000d\u001f\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T01:47:34", "event_id": "671ab189-de08-4d42-89ba-825a550ff4b5", "source_ip": "81.17.28.131", "source_port": 48512, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-24T01:47:33", "event_id": "6ba33f84-9131-4023-a549-d0eb1cb2421c", "source_ip": "81.17.28.131", "source_port": 57806, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-24T00:18:35", "event_id": "c8be86a4-f5d4-404e-b18b-beaad81fcbce", "source_ip": "81.17.28.131", "source_port": 48932, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-24T00:18:35", "event_id": "84aedd37-d285-4aa9-877a-219c961e3f71", "source_ip": "81.17.28.131", "source_port": 41092, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T17:51:25", "event_id": "429036e0-e82e-4ad5-94ae-2a7ddc7c6db0", "source_ip": "81.17.28.131", "source_port": 37162, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000TN\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T15:52:04", "event_id": "68e7553e-a190-4da6-91a2-9baa78447bdf", "source_ip": "81.17.28.131", "source_port": 39048, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-25T15:52:03", "event_id": "2be6eef2-3189-4be0-aaa1-57f92e700f0e", "source_ip": "81.17.28.131", "source_port": 44962, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T11:10:56", "event_id": "8cd3e138-4531-4c84-8be1-7386d9c584f4", "source_ip": "81.17.28.131", "source_port": 53886, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T05:37:54", "event_id": "07377bdb-596f-4650-bc29-06ac5fea7171", "source_ip": "81.17.28.131", "source_port": 50356, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-25T05:37:54", "event_id": "554df08b-8f8d-44c7-8ed4-981a468ce4db", "source_ip": "81.17.28.131", "source_port": 46344, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T05:23:37", "event_id": "074aa45b-8f78-4bb6-b7f9-3f9f83ba380b", "source_ip": "81.17.28.131", "source_port": 52578, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-25T05:23:36", "event_id": "a487ed40-8666-4827-a383-b4a1f4ad78b1", "source_ip": "81.17.28.131", "source_port": 42546, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T02:56:09", "event_id": "00048738-62f0-479d-9f6f-3e9b55e8e73b", "source_ip": "81.17.28.131", "source_port": 39456, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-25T02:56:09", "event_id": "f7c5b723-0c42-4baa-a17d-a73223fce136", "source_ip": "81.17.28.131", "source_port": 55552, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-25T02:20:29", "event_id": "8e8703a6-8990-431c-a59c-74fc198049da", "source_ip": "81.17.28.131", "source_port": 37222, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000:\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T17:43:04", "event_id": "2512e47b-8ca7-41f5-b75d-7c9a89f11d95", "source_ip": "81.17.28.131", "source_port": 60562, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-26T17:43:04", "event_id": "23f126bd-9bf9-4249-aea0-f967f8768bbb", "source_ip": "81.17.28.131", "source_port": 48944, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T15:42:53", "event_id": "be54c583-e9f8-47b7-9540-e62e6a6cfc7a", "source_ip": "81.17.28.131", "source_port": 43156, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-26T15:42:52", "event_id": "137519ba-e41b-4247-8bdf-82fdebc23480", "source_ip": "81.17.28.131", "source_port": 44136, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T14:25:33", "event_id": "073364f4-9d9e-4dd8-abc5-832cf89cc230", "source_ip": "81.17.28.131", "source_port": 48414, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-26T14:25:32", "event_id": "c2188237-fed7-4b54-b159-2d4b1ebdc2df", "source_ip": "81.17.28.131", "source_port": 46214, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T10:15:41", "event_id": "03c191c2-09ff-45dc-ac19-efab2d518b32", "source_ip": "81.17.28.131", "source_port": 58074, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-26T10:15:41", "event_id": "a98706ce-a7c9-4574-a8ac-e4b443c9bc6e", "source_ip": "81.17.28.131", "source_port": 33198, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T10:15:40", "event_id": "fd6e4107-d00c-4bde-84f3-25ade62bbcf4", "source_ip": "81.17.28.131", "source_port": 42320, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T07:37:48", "event_id": "cee7a657-555e-4c89-95d6-117296f9b38e", "source_ip": "81.17.28.131", "source_port": 52306, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffdY\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-26T02:14:22", "event_id": "b93f25e7-d60f-4fc8-8406-94d2f1a0de5f", "source_ip": "81.17.28.131", "source_port": 37002, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-26T02:14:22", "event_id": "ec804f99-7c27-4d4a-a16c-2b47c278ab56", "source_ip": "81.17.28.131", "source_port": 43626, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T20:52:20", "event_id": "ba16c52b-0198-4f7d-ab19-8e943e550a74", "source_ip": "81.17.28.131", "source_port": 52122, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-27T20:52:20", "event_id": "4c46aff4-a54d-4fae-be44-f20ec0f8ac5a", "source_ip": "81.17.28.131", "source_port": 34892, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T19:19:46", "event_id": "2e80af64-c265-4bc8-b545-6051a9f502df", "source_ip": "81.17.28.131", "source_port": 47292, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-27T19:19:45", "event_id": "aa4ac488-7c52-472d-8c86-50163a188a4d", "source_ip": "81.17.28.131", "source_port": 46018, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-27T18:14:42", "event_id": "ddc10565-f577-434c-bfc9-b431fe92d429", "source_ip": "185.12.44.133", "source_port": 62599, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 135, "dest_bytes": 13, "network_bytes": 148, "event_summary": "\ufffd\ufffd_\ufffd\ufffdI]\ufffd\ufffdK\u0001\ufffd@\ufffd\ufffdV/S\ufffdm lgu\ufffd\ufffd\u022b\u060e\r\ufffd\ufffd\ufffdK8pd\ufffd\ufffdU\ufffd\ufffd\ufffd\fw\u0000>Hz\u0234|\u0013iy\thE!\n\ufffdD\u007f\ufffd%'$0\ufffd\ufffd[i\r,\ufffd\ufffd\u001f$\ufffdu\ufffdg\ufffd\ufffd\ufffd\ufffdc\ufffd\ufffd\ufffd\ufffd\ufffd\ufffdo\ufffd\ufffdla'd1\n}\ufffd\ufffd+f\ufffd\ufffd\ufffdh\ufffd\ufffd]\u000f\ufffd\u000f\ufffd\u0011X\ufffdH\ufffdfn\u0001U\u0002*\ufffd\ufffd&;!"} +{"timestamp": "2026-08-27T18:13:10", "event_id": "b9a9db0f-5c56-4a00-9e8f-72ab8c6232a3", "source_ip": "185.12.44.133", "source_port": 60585, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 68, "dest_bytes": 13, "network_bytes": 81, "event_summary": "\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b\ufffdR\u001f\ufffd\u01b8N\ufffd\u0011\ufffdY\ufffdq\u0017\u007f|O\ufffd<-UW1605-FPwfkjsgA!ei"} +{"timestamp": "2026-08-27T18:12:58", "event_id": "8303f69b-c5c6-48ea-8cab-8bf14f4fc728", "source_ip": "185.12.44.133", "source_port": 49065, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 583, "dest_bytes": 13, "network_bytes": 596, "event_summary": "i\u00b3\ufffdk\ufffd`\ufffd@G;\ufffd\ufffd6\u001fQ\ufffd\ufffd\u0002\u0014\ufffd\ufffd\ufffd~\ufffd,y\ufffdZ\ufffdO\u0f11\ufffd\ufffd:{l\ufffd\u0423\ufffdf(\ufffd\ufffd\u0013\ufffd\ufffd\ufffd\ufffdq\ufffd\ufffd\u0394\ufffd\u0007uM\ufffd\u0002\u5d6a\ufffd3(\u0005Y\u0010\ufffd\ufffd4\ufffd\ufffd2\ufffd\ufffd^b\ufffdp\ufffdq\ufffd\ufffd\ufffd\u001bX\u000fq\ufffdy\u0004J\ufffd\ufffd1\u0011\ufffdE?F\r.\ufffd\u007fp\u000eF\ufffdFWQC\u0003\ufffd\ufffd\ufffd6\ufffd\u0017\ufffd!\ufffd\u0000\u000f\ufffd\ufffd4\ufffdi\ufffdEL\ufffd1\ufffd\ufffd\ufffd)\u0017\ufffd\ufffd\ufffdC\ufffd\ufffd\u0013\ufffd]7N\ufffd\ufffd\u0003\ufffd\u0153\ufffd\ufffdq\ufffd\u0003)|!\ufffd\u000f\ufffdE\u0013\u0489\ufffd\ufffdp\ufffd{7\ufffd\r(U\u0001\r8\ufffd\ufffdt\t\ufffd\ufffd-\ufffd\u000fI\ufffd\ufffd\ufffd\ufffd\ufffd\"\u0017\u0017\u001b\ufffd\u0014\ufffd\ufffd\ufffd1\ufffd\ufffdv\ufffd\ufffd\ufffd\u0017\u0228\ufffdE\ufffd-g\u107dD`\ufffd\u001agi\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\u05b2@\ufffd\ufffd\ufffd\ufffd\ufffd\"\n\u01f2#P\u00b9\u0005\u03d7W\u0003\u000f\ufffd\ufffd\u00cbi\ufffd\ufffd\ufffd\ufffd\ufffdv\ufffdt\u05a7\\\u025d\u00ef$!\ufffd\ufffd\ufffd\ufffd\ufffd&\f\\\ufffd\ufffd\u0014uE\ufffd\u0005,$+\ufffd\ufffd\ufffd9\ufffdp_U\ufffdx\ufffd\ufffd-\u0019\ufffd:\ufffd\ufffdp\ufffd\ufffd\ufffd=\u0005\ufffdZ\u0012\ufffd.\r\ufffd\ufffdf\u0015\u0018\n\ufffd\ufffd\ufffd\ufffd>y\ufffd\ufffdy\u001c\ufffd\u0014\ufffdG\ufffd\u001dW\ufffdC\ufffdj\fhr\u068e\ufffd\ufffd\ufffd\ufffd\u06af\u0633C\ufffd\ufffd\u05df\ufffdw\ufffd\ufffd\u001fd\ufffdpf'[+U\ufffd=\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd\ufffd,\ufffd\ufffd\u0011kx\ufffd\ufffdv<\ufffd\ufffd=\ufffd\u00194o!hH\ufffd\ufffd\ufffd$h\ufffd\ufffd\ufffd\ufffd\u0003{\ufffdf\ufffd3\u000f]\ufffd\ufffd\u001e\ufffd\u0016E.q\ufffd2\ufffd9#\ufffd\ufffd\ufffd\ufffd\"kCl\u001dy\ufffd\ufffdy-o\ufffd\ufffd\ufffd\u007f\ufffd\\\ufffd\ufffd\ufffd0I\ufffdu\ufffd\u0014\ufffd\ufffdul\ufffd\ufffd(x\u03d9N\ufffd\ufffd8\ufffd\u0017\ufffd\ufffd\u001c\ufffd\ufffd\ufffdaR:\ufffd\ufffd\u001d\u007f\ufffd# \u0006\u033b\ufffd\ufffd\u0368\ufffd\u0399\ufffd\ufffd\u001bX|\ufffd4GA\ufffd\u06f19\ufffd\u001e\ufffd\ufffdIM[\u001dQ\u0017EONL0#\ufffd\ufffd\r\ufffd%y\ufffd\u033c\ufffd0\ufffd\u0007\ufffdJ\ufffd\ufffd\"1\ufffd^\ufffd \ufffdji\ufffd"} +{"timestamp": "2026-08-27T18:11:27", "event_id": "24b01feb-5247-4983-ac70-fe59f53e540d", "source_ip": "185.12.44.133", "source_port": 59853, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 39131, "network_protocol": "", "application_protocol": "bittorrent", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 68, "dest_bytes": 13, "network_bytes": 81, "event_summary": "\u0013BitTorrent protocol\u0000\u0000\u0000\u0000\u0000\u0018\u0000\u0005\u001b\ufffdR\u001f\ufffd\u01b8N\ufffd\u0011\ufffdY\ufffdq\u0017\u007f|O\ufffd<-UW1605-C~o~sOWdmI36"} +{"timestamp": "2026-08-27T15:44:48", "event_id": "24d5a369-2d61-481e-a11b-b06710546cb7", "source_ip": "179.43.150.26", "source_port": 40646, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z535", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 759000000, "source_bytes": 344, "dest_bytes": 312, "network_bytes": 656, "event_summary": ""} +{"timestamp": "2026-08-27T15:44:48", "event_id": "9e6c928f-a568-4724-a26d-59a042e7c8ab", "source_ip": "179.43.150.26", "source_port": 63056, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z5006", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 767000000, "source_bytes": 345, "dest_bytes": 312, "network_bytes": 657, "event_summary": ""} +{"timestamp": "2026-08-27T15:43:20", "event_id": "8fb96a2a-4400-478c-a460-190345b39eaa", "source_ip": "179.43.150.26", "source_port": 59892, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9000, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z60", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9000\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 502000000, "source_bytes": 347, "dest_bytes": 312, "network_bytes": 659, "event_summary": ""} +{"timestamp": "2026-08-28T17:40:22", "event_id": "c4cab9e6-1a2e-421d-a506-18f377a0c786", "source_ip": "81.17.28.131", "source_port": 42854, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 141, "dest_bytes": 77, "network_bytes": 218, "event_summary": ""} +{"timestamp": "2026-08-28T17:40:22", "event_id": "610ab232-5a49-4834-9019-69c46abc1932", "source_ip": "81.17.28.131", "source_port": 33694, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T17:07:15", "event_id": "beff14a7-b070-4be8-a685-c71fff164315", "source_ip": "141.255.165.68", "source_port": 35628, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T17:06:45", "event_id": "e1b3c2d0-2698-46d8-89c0-93372a136603", "source_ip": "141.255.165.68", "source_port": 39708, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T16:59:21", "event_id": "a06b656b-21fc-4955-bb76-0186811323c0", "source_ip": "81.17.28.131", "source_port": 32856, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8899, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:8899\",\"user-agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 140, "dest_bytes": 77, "network_bytes": 217, "event_summary": ""} +{"timestamp": "2026-08-28T16:59:21", "event_id": "2b083ca6-c847-4fe7-b459-06206c64e7a4", "source_ip": "81.17.28.131", "source_port": 55462, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 8089, "network_protocol": "", "application_protocol": "", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 4, "dest_bytes": 12, "network_bytes": 16, "event_summary": "\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T15:51:00", "event_id": "de46d871-8984-4c93-a941-d2a863822a80", "source_ip": "81.17.28.131", "source_port": 41614, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000[\ufffd\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T13:47:51", "event_id": "d53c7745-a420-4f94-9e03-6457a31268b3", "source_ip": "81.17.28.131", "source_port": 51772, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 135, "network_protocol": "", "application_protocol": "dce_rpc", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 116, "dest_bytes": 12, "network_bytes": 128, "event_summary": "\u0005\u0000\u000b\u0017\u0010\u0000\u0000\u0000t\u0000\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0010\u0000\u0010\u0000\u0000\u0000\u0000\u0002\u0000\u0000\u0000\ufffd&\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000\u0004]\ufffd\ufffd\ufffd\u001c\ufffd\u0011\ufffd\ufffd\b\u0000+\u0010H`\u0002\u0000\u0000\u0000\u0000\u0000\u0001\u0000\b\ufffd\ufffd\ufffd\u001f]\ufffd\u0011\ufffd\ufffd\b\u0000+\u0014\ufffd\ufffd\u0003\u0000\u0000\u0000,\u001c\ufffdl\u0012\ufffd@E\u0003\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0001\u0000\u0000\u0000"} +{"timestamp": "2026-08-28T08:54:42", "event_id": "ecf44ee2-6527-4a18-b5f0-cdea01117913", "source_ip": "179.43.150.26", "source_port": 42332, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z2565", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 638000000, "source_bytes": 353, "dest_bytes": 312, "network_bytes": 665, "event_summary": ""} +{"timestamp": "2026-08-28T08:34:33", "event_id": "4adbbfb2-8574-43b7-af73-c0108d8f3b4b", "source_ip": "179.43.150.26", "source_port": 64360, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z3145", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 764000000, "source_bytes": 345, "dest_bytes": 312, "network_bytes": 657, "event_summary": ""} +{"timestamp": "2026-08-28T08:34:33", "event_id": "09fe775c-dc3a-4597-b5c5-45db1ab76e14", "source_ip": "179.43.150.26", "source_port": 43112, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 9090, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0", "url_path": "/z1271", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept\":\"*/*\",\"host\":\"<HONEYPOT>:9090\",\"user-agent\":\"Mozilla/5.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0300_341eb0d8946c", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 4, "event_duration": 772000000, "source_bytes": 345, "dest_bytes": 312, "network_bytes": 657, "event_summary": ""} +{"timestamp": "2026-08-29T23:53:37", "event_id": "bd6ab41f-7359-4f7e-b0da-c5d227a2a3ba", "source_ip": "179.43.167.2", "source_port": 23174, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:23174;branch=z9hG4bK-524287-1---05aa8cbb53043f6d\r\nFrom: <sip:%40@<HONEYPOT>>;tag=48c88107\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: Jblk9d2dKb1Oz0YDfPliP6..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:23174>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:45:34", "event_id": "7ebbb8d0-f437-46c7-9519-c412f2212881", "source_ip": "179.43.167.2", "source_port": 18396, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:18396;branch=z9hG4bK-524287-1---b27b2f003ad947fb\r\nFrom: <sip:%40@<HONEYPOT>>;tag=c9c8c4e0\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: GXZJPSoc7R5HfZBG2oEQLO..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:18396>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:36:28", "event_id": "0d4ea4f2-f1a1-43cb-81c5-361edb94c3e9", "source_ip": "179.43.167.2", "source_port": 30386, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:30386;branch=z9hG4bK-524287-1---adede0b1011557e0\r\nFrom: <sip:%40@<HONEYPOT>>;tag=227ca909\r\nTo: <sip:0123908351673002@<HONEYPOT>:5060>\r\nCall-ID: grQc3QfxDnjgtze0yDlLGH..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:30386>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:28:24", "event_id": "96b90b03-7ee6-456b-8b86-d4dfae1b4811", "source_ip": "179.43.167.2", "source_port": 60854, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:60854;branch=z9hG4bK-524287-1---17b5c10b8dc9ddb7\r\nFrom: <sip:%40@<HONEYPOT>>;tag=2512a90f\r\nTo: <sip:0123908351673002@<HONEYPOT>:5060>\r\nCall-ID: ckm5WHhnIg1LTZZezYiji7..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:60854>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:19:17", "event_id": "1b406ef5-fec2-4e3f-a84d-1464a0dd5734", "source_ip": "179.43.167.2", "source_port": 46232, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:46232;branch=z9hG4bK-524287-1---865d971970b8b82d\r\nFrom: <sip:%40@<HONEYPOT>>;tag=c87a580f\r\nTo: <sip:0103908351673002@<HONEYPOT>:5060>\r\nCall-ID: 4U95dNXLCnvjyaMaJ0HGeX..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:46232>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:11:13", "event_id": "87927cb6-d040-4853-9812-52c55c2db8f2", "source_ip": "179.43.167.2", "source_port": 57402, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:57402;branch=z9hG4bK-524287-1---65e8411eb928e0c3\r\nFrom: <sip:%40@<HONEYPOT>>;tag=da5e08c6\r\nTo: <sip:0103908351673002@<HONEYPOT>:5060>\r\nCall-ID: o7KK745itMGt9PfzIyG00K..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:57402>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T23:02:06", "event_id": "33e829a7-855c-400a-90c3-f156b400b775", "source_ip": "179.43.167.2", "source_port": 64538, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:00113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:64538;branch=z9hG4bK-524287-1---7674b6098e2d941e\r\nFrom: <sip:%40@<HONEYPOT>>;tag=9c9d709a\r\nTo: <sip:00113908351673002@<HONEYPOT>:5060>\r\nCall-ID: 7QFwff1dXnMJDnpHEJn8Mk..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:64538>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:54:01", "event_id": "2c004bbb-951d-4f08-8f4c-85e23dc85022", "source_ip": "179.43.167.2", "source_port": 23658, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:00113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:23658;branch=z9hG4bK-524287-1---ce92000b3b41920f\r\nFrom: <sip:%40@<HONEYPOT>>;tag=8cc3f9c9\r\nTo: <sip:00113908351673002@<HONEYPOT>:5060>\r\nCall-ID: pEUTZk4f49isVZaYeUhcG5..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:23658>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:44:52", "event_id": "bec003ef-34fd-4b2d-80d5-45496c723223", "source_ip": "179.43.167.2", "source_port": 22292, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:8103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:22292;branch=z9hG4bK-524287-1---f0e4233fc6f83e9b\r\nFrom: <sip:%40@<HONEYPOT>>;tag=d7b7485a\r\nTo: <sip:8103908351673002@<HONEYPOT>:5060>\r\nCall-ID: Zm8jq9H3n9D3wwpfhcEept..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:22292>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:36:47", "event_id": "6e248050-8505-4155-866d-0eaf59b1a1cd", "source_ip": "179.43.167.2", "source_port": 28724, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:8103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:28724;branch=z9hG4bK-524287-1---b03867f4fe1b93a9\r\nFrom: <sip:%40@<HONEYPOT>>;tag=0149221f\r\nTo: <sip:8103908351673002@<HONEYPOT>:5060>\r\nCall-ID: n8EV1zzjyOkWm4Y8Q756zs..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:28724>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:27:39", "event_id": "439f7680-cca1-4178-b141-29dcfd5f29d2", "source_ip": "179.43.167.2", "source_port": 1382, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1065, "dest_bytes": 12, "network_bytes": 1077, "event_summary": "INVITE sip:0003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:1382;branch=z9hG4bK-524287-1---d632a1c303d8a2cb\r\nFrom: <sip:%40@<HONEYPOT>>;tag=72ca8833\r\nTo: <sip:0003908351673002@<HONEYPOT>:5060>\r\nCall-ID: zJenhRsRlbTCLNcuIZNfm2..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:1382>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:19:35", "event_id": "d2669f91-15b3-437c-8bb6-5a6e1eeb956b", "source_ip": "179.43.167.2", "source_port": 54284, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:54284;branch=z9hG4bK-524287-1---d16e8a8ff1aadf3a\r\nFrom: <sip:%40@<HONEYPOT>>;tag=6259ef10\r\nTo: <sip:0003908351673002@<HONEYPOT>:5060>\r\nCall-ID: nyxeFXxKNs4wtFmXPJlNA6..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:54284>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:10:27", "event_id": "6d5747ab-2116-450d-8684-23be9589ec93", "source_ip": "179.43.167.2", "source_port": 50904, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:9003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:50904;branch=z9hG4bK-524287-1---60c6a177e2c8dc41\r\nFrom: <sip:%40@<HONEYPOT>>;tag=a50fa0b2\r\nTo: <sip:9003908351673002@<HONEYPOT>:5060>\r\nCall-ID: 0wghdNSLqkpcUzXY3c6hfw..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:50904>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T22:02:22", "event_id": "c710fc59-5596-4e9e-ad73-651a32479dcf", "source_ip": "179.43.167.2", "source_port": 45274, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:9003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:45274;branch=z9hG4bK-524287-1---126d73f1f41880e9\r\nFrom: <sip:%40@<HONEYPOT>>;tag=47606ef7\r\nTo: <sip:9003908351673002@<HONEYPOT>:5060>\r\nCall-ID: KizlWgb6P30EjIJyvdmCTc..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:45274>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:53:14", "event_id": "68cd5bb0-d96c-4cac-bc2c-f9362186cb03", "source_ip": "179.43.167.2", "source_port": 28150, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1061, "dest_bytes": 12, "network_bytes": 1073, "event_summary": "INVITE sip:3908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:28150;branch=z9hG4bK-524287-1---ea75d15952837629\r\nFrom: <sip:%40@<HONEYPOT>>;tag=bf3bbd59\r\nTo: <sip:3908351673002@<HONEYPOT>:5060>\r\nCall-ID: DfFdtnb0JVsSdhBMNRdc8l..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:28150>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:45:10", "event_id": "c5fc307e-7f2a-4c8b-82f5-a663d5942a79", "source_ip": "179.43.167.2", "source_port": 43322, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1065, "dest_bytes": 12, "network_bytes": 1077, "event_summary": "INVITE sip:3908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:43322;branch=z9hG4bK-524287-1---9ae833af75d2df71\r\nFrom: <sip:%40@<HONEYPOT>>;tag=f679962f\r\nTo: <sip:3908351673002@<HONEYPOT>:5060>\r\nCall-ID: CzPH6TWTjDru4mE07p5ILs..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:43322>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:36:02", "event_id": "41369f76-c791-4728-b701-66c43133fab5", "source_ip": "179.43.167.2", "source_port": 57630, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:57630;branch=z9hG4bK-524287-1---ee37fa99ab536b75\r\nFrom: <sip:%40@<HONEYPOT>>;tag=e90729c5\r\nTo: <sip:90113908351673002@<HONEYPOT>:5060>\r\nCall-ID: LGJ9VkxfKz7DybiGpskbnB..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:57630>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:27:56", "event_id": "13f8d596-fff7-4a6f-936b-7677b3efea12", "source_ip": "179.43.167.2", "source_port": 53720, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:90113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:53720;branch=z9hG4bK-524287-1---305f8b2325565d62\r\nFrom: <sip:%40@<HONEYPOT>>;tag=a0820238\r\nTo: <sip:90113908351673002@<HONEYPOT>:5060>\r\nCall-ID: C4Do0Z4xVHEosy2f0o2GYL..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:53720>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:18:47", "event_id": "e30ed07c-ac99-4a45-bd09-041faf6cb71d", "source_ip": "179.43.167.2", "source_port": 59686, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1065, "dest_bytes": 12, "network_bytes": 1077, "event_summary": "INVITE sip:003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:59686;branch=z9hG4bK-524287-1---43bb67d9fce197b4\r\nFrom: <sip:%40@<HONEYPOT>>;tag=a9faa500\r\nTo: <sip:003908351673002@<HONEYPOT>:5060>\r\nCall-ID: yvpGomNVmw4l4QMqXBInt0..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:59686>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-29T21:10:40", "event_id": "c6c3a633-27f1-4f0b-9983-a81038bae6a3", "source_ip": "179.43.167.2", "source_port": 61152, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:61152;branch=z9hG4bK-524287-1---66c6b6b5a364ac4d\r\nFrom: <sip:%40@<HONEYPOT>>;tag=695a5d56\r\nTo: <sip:003908351673002@<HONEYPOT>:5060>\r\nCall-ID: xHPt7iBd2mqRzTzI7EJ8sQ..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:61152>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T22:22:10", "event_id": "09bef26f-4f24-4992-a04e-14e8170bbfd5", "source_ip": "179.43.146.27", "source_port": 45640, "source_domain": "mta2.smartfastjoy3.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 2053, "network_protocol": "tls", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2053\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "t13i1310h1_f57a46bbacb6_e7c285222651", "tls_client_ja3": "faa162b5a653756fba26803ea81b362f", "tls_client_version": "TLSv1.3", "tls_client_cipher": "TLS_AES_128_GCM_SHA256", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 170, "dest_bytes": 78, "network_bytes": 248, "event_summary": ""} +{"timestamp": "2026-08-30T21:36:05", "event_id": "5725fe74-0760-4aad-b21e-ca3b8586e73b", "source_ip": "179.43.146.27", "source_port": 40548, "source_domain": "mta2.smartfastjoy3.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 2052, "network_protocol": "", "application_protocol": "http", "http_method": "GET", "user_agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0", "url_path": "/", "url_domain": "<HONEYPOT>", "http_request_headers": "{\"accept-encoding\":\"gzip\",\"connection\":\"close\",\"host\":\"<HONEYPOT>:2052\",\"user-agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0\"}", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "ge11nn0400_9c3956fad5da", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 170, "dest_bytes": 78, "network_bytes": 248, "event_summary": ""} +{"timestamp": "2026-08-30T20:19:47", "event_id": "f71aa9b6-4df2-4eb4-822a-81fbc6cb0a02", "source_ip": "141.255.165.69", "source_port": 26452, "source_domain": "hooksandheels.net", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T20:19:21", "event_id": "c2d18bfb-c167-4f48-b785-9a5f7931dba1", "source_ip": "141.255.165.66", "source_port": 29980, "source_domain": "4soho.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T20:19:21", "event_id": "934aec4c-5cc2-4836-bc36-4ab37e960b51", "source_ip": "141.255.165.68", "source_port": 41322, "source_domain": "eternalpink.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 101000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T20:19:17", "event_id": "7b0eb6ae-0086-411e-9d78-f6b358c81cac", "source_ip": "141.255.165.69", "source_port": 55990, "source_domain": "hooksandheels.net", "country_code": "CH", "country_name": "Switzerland", "city_name": "Zurich", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 1723, "network_protocol": "", "application_protocol": "pptp", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 156, "dest_bytes": 14, "network_bytes": 170, "event_summary": "\u0000\ufffd\u0000\u0001\u001a+<M\u0000\u0001\u0000\u0000\u0001\u0000\u0000\u0000\u0000\u0000\u0000\u0003\u0000\u0000\u0000\u0003\ufffd\ufffd\u0000\u0001local\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000cananian\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000"} +{"timestamp": "2026-08-30T12:11:49", "event_id": "45274697-5dfe-4e13-8ddc-f48e5529ba97", "source_ip": "179.43.167.2", "source_port": 45874, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:45874;branch=z9hG4bK-524287-1---3cc68cf71a83c441\r\nFrom: <sip:%40@<HONEYPOT>>;tag=1ed0fb8c\r\nTo: <sip:90013908351673002@<HONEYPOT>:5060>\r\nCall-ID: aRzv71qETpv1cok0jE8uoz..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:45874>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:58:16", "event_id": "02427af3-e60e-4c1a-972d-85cf7bf0e232", "source_ip": "179.43.167.2", "source_port": 21054, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:90013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:21054;branch=z9hG4bK-524287-1---cb8f9ce8a67a1137\r\nFrom: <sip:%40@<HONEYPOT>>;tag=5a7fb685\r\nTo: <sip:90013908351673002@<HONEYPOT>:5060>\r\nCall-ID: mOYlJm7d3drR9bGCUB6Q1v..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:21054>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:43:02", "event_id": "7e86aad1-c71a-42b7-9f2f-99192786a568", "source_ip": "179.43.167.2", "source_port": 56274, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:56274;branch=z9hG4bK-524287-1---995e1c7494baebf9\r\nFrom: <sip:%40@<HONEYPOT>>;tag=048f01c8\r\nTo: <sip:90123908351673002@<HONEYPOT>:5060>\r\nCall-ID: yQtmNdIEq0HTOUfOQXl8nY..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:56274>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:29:29", "event_id": "4934a352-4d0a-47a4-ba95-2dc151cc278b", "source_ip": "179.43.167.2", "source_port": 8882, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:90123908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:8882;branch=z9hG4bK-524287-1---75d881d353345487\r\nFrom: <sip:%40@<HONEYPOT>>;tag=71efda1c\r\nTo: <sip:90123908351673002@<HONEYPOT>:5060>\r\nCall-ID: J5MoxNcfR7cyi4LhLK5K2e..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:8882>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:14:15", "event_id": "3369f495-92e8-4373-8d40-7acce962258a", "source_ip": "179.43.167.2", "source_port": 24962, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:90103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:24962;branch=z9hG4bK-524287-1---9bc29b96647e6e80\r\nFrom: <sip:%40@<HONEYPOT>>;tag=5822cee3\r\nTo: <sip:90103908351673002@<HONEYPOT>:5060>\r\nCall-ID: eaFzzNBYE56JEQqKuiwtgH..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:24962>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T11:00:42", "event_id": "132523f4-f6fe-4192-828b-715d8b9f085a", "source_ip": "179.43.167.2", "source_port": 5742, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:90103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:5742;branch=z9hG4bK-524287-1---832c19cb92f65a74\r\nFrom: <sip:%40@<HONEYPOT>>;tag=41f203ce\r\nTo: <sip:90103908351673002@<HONEYPOT>:5060>\r\nCall-ID: 0nZoOiqIrchJosfUKLiQmx..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:5742>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:45:27", "event_id": "0e661c31-87e1-4bf7-91ac-2ac51cfe9300", "source_ip": "179.43.167.2", "source_port": 51574, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:900113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:51574;branch=z9hG4bK-524287-1---bb852e3f9f5a7173\r\nFrom: <sip:%40@<HONEYPOT>>;tag=ac66b72d\r\nTo: <sip:900113908351673002@<HONEYPOT>:5060>\r\nCall-ID: 3FNwct7jScyfZ5jPB9raP1..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:51574>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:31:54", "event_id": "3699b0ee-42a5-4840-a5bd-f4293965c02d", "source_ip": "179.43.167.2", "source_port": 35678, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1075, "dest_bytes": 12, "network_bytes": 1087, "event_summary": "INVITE sip:900113908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:35678;branch=z9hG4bK-524287-1---a1493b2c690027e3\r\nFrom: <sip:%40@<HONEYPOT>>;tag=c5b702db\r\nTo: <sip:900113908351673002@<HONEYPOT>:5060>\r\nCall-ID: RDIOOMTABMcyAKHd9LGw5Z..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:35678>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:16:40", "event_id": "d674bd52-0a13-4ed8-bd86-568553c9a1af", "source_ip": "179.43.167.2", "source_port": 30314, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1069, "dest_bytes": 12, "network_bytes": 1081, "event_summary": "INVITE sip:98103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:30314;branch=z9hG4bK-524287-1---d2be98a6327d0db1\r\nFrom: <sip:%40@<HONEYPOT>>;tag=9fdd8311\r\nTo: <sip:98103908351673002@<HONEYPOT>:5060>\r\nCall-ID: CUBKGiUfbi3DIigNW7oYrb..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:30314>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T10:03:07", "event_id": "a622c4ab-4a0c-440c-9ba2-22481f0695d5", "source_ip": "179.43.167.2", "source_port": 6420, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 98000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:98103908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:6420;branch=z9hG4bK-524287-1---93b62c4878e98a97\r\nFrom: <sip:%40@<HONEYPOT>>;tag=9d84e9e5\r\nTo: <sip:98103908351673002@<HONEYPOT>:5060>\r\nCall-ID: 7USmlKzCRttc1tVRa3bbSX..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:6420>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:47:52", "event_id": "f59fa655-6009-48d1-99c3-ca0ba0e9ea01", "source_ip": "179.43.167.2", "source_port": 4920, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:90003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:4920;branch=z9hG4bK-524287-1---2efc8f84fc557b55\r\nFrom: <sip:%40@<HONEYPOT>>;tag=79a0a0dd\r\nTo: <sip:90003908351673002@<HONEYPOT>:5060>\r\nCall-ID: ro05azL8nMqhZbFmJcVtyd..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:4920>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:34:20", "event_id": "1ec7b252-6012-434c-a488-6aa07cf81978", "source_ip": "179.43.167.2", "source_port": 48364, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1073, "dest_bytes": 12, "network_bytes": 1085, "event_summary": "INVITE sip:90003908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:48364;branch=z9hG4bK-524287-1---177c7eaf6117392b\r\nFrom: <sip:%40@<HONEYPOT>>;tag=3553a58e\r\nTo: <sip:90003908351673002@<HONEYPOT>:5060>\r\nCall-ID: Frr8F6VWPBMItKOotzcW5D..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:48364>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:19:05", "event_id": "b6e4caf7-3076-43cf-bb0a-55217d567ac8", "source_ip": "179.43.167.2", "source_port": 14648, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 99000000, "source_bytes": 1067, "dest_bytes": 12, "network_bytes": 1079, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:14648;branch=z9hG4bK-524287-1---1075b97d3e957570\r\nFrom: <sip:%40@<HONEYPOT>>;tag=2bfd3183\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: dZqR1AALEd4t7Mrsh94VzE..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:14648>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16619816341@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} +{"timestamp": "2026-08-30T09:05:33", "event_id": "ceed952a-cdb3-48ed-acb3-fd1e94c98aa3", "source_ip": "179.43.167.2", "source_port": 45800, "source_domain": "hostedby.privatelayer.com", "country_code": "CH", "country_name": "Switzerland", "city_name": "R\u00fcmlang", "asn_number": 51852, "asn_org": "Private Layer INC", "dest_port": 5060, "network_protocol": "", "application_protocol": "sip", "http_method": "", "user_agent": "", "url_path": "", "url_domain": "", "http_request_headers": "", "ssh_client_hassh": "", "tls_client_ja4": "", "tls_client_ja3": "", "tls_client_version": "", "tls_client_cipher": "", "http_request_ja4h": "", "tls_client_server_name": "", "tls_client_cert_subject": "", "tls_client_cert_issuer": "", "event_sequence": 1, "event_duration": 100000000, "source_bytes": 1071, "dest_bytes": 12, "network_bytes": 1083, "event_summary": "INVITE sip:0013908351673002@<HONEYPOT>:5060;transport=UDP SIP/2.0\r\nVia: SIP/2.0/TCP 179.43.167.2:45800;branch=z9hG4bK-524287-1---95e80c7428d9795a\r\nFrom: <sip:%40@<HONEYPOT>>;tag=b809dbdf\r\nTo: <sip:0013908351673002@<HONEYPOT>:5060>\r\nCall-ID: HcfxNg5qer7RPKgxzokvcF..\r\nCSeq: 1 INVITE\r\nContact: <sip:%40@179.43.167.2:45800>\r\nUser-Agent: M800C/v.7.40A.250.440\r\nAllow: INVITE, ACK, BYE, CANCEL, OPTIONS, PRACK, SUBSCRIBE, NOTIFY, REFER, MESSAGE, UPDATE, INFO\r\nSupported: replaces, norefersub, timer, 100rel\r\nP-Asserted-Identity: <sip:16612133893@<HONEYPOT>>\r\nContent-Type: application/sdp\r\nMax-Forwards: 70\r\nContent-Length: 429\r\n\r\nv=0\r\no=- 3747 3747 IN IP4 179.43.167.2\r\ns=TUFAN Call\r\nc=IN IP4 179.43.167.2\r\nt=0 0\r\nm=audio 10990 RTP/AVP 0 8 18 9 101 13 126 97\r\na=rtpmap:0 PCMU/8000\r\na=rtpmap:8 PCMA/8000\r\na=rtpmap:18 G729/8000\r\na=fmtp:18 annexb=no\r\na=rtpmap:9 G722/8000\r\na=rtpmap:101 telephone-event/8000\r\na=fmtp:101 0-16\r\na=rtpmap:13 CN/8000\r\na=rtpmap:126 telephone-event/16000\r\na=fmtp:126 0-16\r\na=rtpmap:97 iLBC/8000\r\na=ptime:20\r\na=maxptime:150\r\na=sendrecv\r\n"} |