diff options
Diffstat (limited to 'kevlar/2026-09-07/honeylabs/events-AS216246.ndjson')
| -rw-r--r-- | kevlar/2026-09-07/honeylabs/events-AS216246.ndjson | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/kevlar/2026-09-07/honeylabs/events-AS216246.ndjson b/kevlar/2026-09-07/honeylabs/events-AS216246.ndjson new file mode 100644 index 0000000..62f74df --- /dev/null +++ b/kevlar/2026-09-07/honeylabs/events-AS216246.ndjson @@ -0,0 +1,2 @@ +{"timestamp":"2026-09-03T20:05:03","event_id":"b177bb95-06e3-4c45-8713-3db77a154ce9","source_ip":"45.151.101.38","source_port":36904,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"Moscow","asn_number":216246,"asn_org":"Aeza Group LLC","dest_port":8006,"network_protocol":"tls","application_protocol":"http","http_method":"POST","user_agent":"Python-urllib/3.10","url_path":"/api2/json/access/ticket","url_domain":"<HONEYPOT>","http_request_headers":"{\"accept-encoding\":\"identity\",\"connection\":\"close\",\"content-length\":\"48\",\"content-type\":\"application/x-www-form-urlencoded\",\"host\":\"<HONEYPOT>:8006\",\"user-agent\":\"Python-urllib/3.10\"}","ssh_client_hassh":"","tls_client_ja4":"t13i181000_85036bcba153_d41ae481755e","tls_client_ja3":"8a9d5d0f12f7d43ee3af1c51d2998d99","tls_client_version":"TLSv1.3","tls_client_cipher":"TLS_AES_128_GCM_SHA256","http_request_ja4h":"po11nn0600_def5433ae821","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":101000000,"source_bytes":263,"dest_bytes":78,"network_bytes":341,"event_summary":""} +{"timestamp":"2026-08-31T13:15:24","event_id":"433ef92e-cd2f-4ef0-8ae0-fc11b23ec8c4","source_ip":"176.124.222.61","source_port":57138,"source_domain":"","country_code":"RU","country_name":"Russia","city_name":"Moscow","asn_number":216246,"asn_org":"Aeza Group LLC","dest_port":5432,"network_protocol":"","application_protocol":"","http_method":"","user_agent":"","url_path":"","url_domain":"","http_request_headers":"","ssh_client_hassh":"","tls_client_ja4":"","tls_client_ja3":"","tls_client_version":"","tls_client_cipher":"","http_request_ja4h":"","tls_client_server_name":"","tls_client_cert_subject":"","tls_client_cert_issuer":"","event_sequence":1,"event_duration":100000000,"source_bytes":8,"dest_bytes":14,"network_bytes":22,"event_summary":"\u0000\u0000\u0000\b\u0004�\u0016/"}
\ No newline at end of file |